Summary
[5.4.17-2136.356.4.3]
- net: skbuff: fix missing zerocopy reference in pskb_carve helpers (Minh Nguyen) [Orabug: 39639989] {CVE-2026-52943}
Credit Statement:
The following people reported security vulnerabilities addressed by this ELSA to Oracle:
Minh Nguyen <minhnguyen.080505@gmail.com> CVE-2026-52943
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | kernel-uek | 0:5.4.17-2136.356.4.3.el8uek |
| Oracle Linux · 7 | kernel-uek-container | 0:5.4.17-2136.356.4.3.el8uek |
| Oracle Linux · 7 | kernel-uek-container-debug | 0:5.4.17-2136.356.4.3.el8uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:5.4.17-2136.356.4.3.el8uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:5.4.17-2136.356.4.3.el8uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:5.4.17-2136.356.4.3.el8uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:5.4.17-2136.356.4.3.el8uek |
| Oracle Linux · 7 | kernel-uek-tools | 0:5.4.17-2136.356.4.3.el7uek |
Vulnerabilities 1
-
High 7.8CVE-2026-52943 Public exploit
net: skbuff: fix missing zerocopy reference in pskb_carve helpers
In the Linux kernel, the following vulnerability has been resolved: net: skbuff: fix missing zerocopy reference in pskb_carve helpers pskb_carve_inside_header() and pskb_carve_inside_nonlinear() both copy the old skb_shared_info header into a new buffer via m…