Summary
[5.15.0-321.202.5.3]
- net: skbuff: fix missing zerocopy reference in pskb_carve helpers (Minh Nguyen) [Orabug: 39639981] {CVE-2026-52943}
Credit Statement:
The following people reported security vulnerabilities addressed by this ELSA to Oracle:
Minh Nguyen <minhnguyen.080505@gmail.com> CVE-2026-52943
Fixed packages 19
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | bpftool | 0:5.15.0-321.202.5.3.el9uek |
| Oracle Linux · 8 | kernel-uek | 0:5.15.0-321.202.5.3.el9uek |
| Oracle Linux · 8 | kernel-uek-container | 0:5.15.0-321.202.5.3.el9uek |
| Oracle Linux · 8 | kernel-uek-container-debug | 0:5.15.0-321.202.5.3.el9uek |
| Oracle Linux · 8 | kernel-uek-core | 0:5.15.0-321.202.5.3.el9uek |
| Oracle Linux · 8 | kernel-uek-debug | 0:5.15.0-321.202.5.3.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-core | 0:5.15.0-321.202.5.3.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-devel | 0:5.15.0-321.202.5.3.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-modules | 0:5.15.0-321.202.5.3.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-modules-extra | 0:5.15.0-321.202.5.3.el9uek |
| Oracle Linux · 8 | kernel-uek-devel | 0:5.15.0-321.202.5.3.el9uek |
| Oracle Linux · 8 | kernel-uek-doc | 0:5.15.0-321.202.5.3.el9uek |
| Oracle Linux · 8 | kernel-uek-modules | 0:5.15.0-321.202.5.3.el9uek |
| Oracle Linux · 8 | kernel-uek-modules-extra | 0:5.15.0-321.202.5.3.el9uek |
| Oracle Linux · 8 | kernel-uek64k | 0:5.15.0-321.202.5.3.el9uek |
| Oracle Linux · 8 | kernel-uek64k-core | 0:5.15.0-321.202.5.3.el9uek |
| Oracle Linux · 8 | kernel-uek64k-devel | 0:5.15.0-321.202.5.3.el9uek |
| Oracle Linux · 8 | kernel-uek64k-modules | 0:5.15.0-321.202.5.3.el9uek |
| Oracle Linux · 8 | kernel-uek64k-modules-extra | 0:5.15.0-321.202.5.3.el9uek |
Vulnerabilities 1
-
High 7.8CVE-2026-52943 Public exploit
net: skbuff: fix missing zerocopy reference in pskb_carve helpers
In the Linux kernel, the following vulnerability has been resolved: net: skbuff: fix missing zerocopy reference in pskb_carve helpers pskb_carve_inside_header() and pskb_carve_inside_nonlinear() both copy the old skb_shared_info header into a new buffer via m…