Skip to content
OpenAdvisories
High · 7.8 Public exploit CVE-2026-52943 EUVD-2026-38732GHSA-vwrr-994w-h832

net: skbuff: fix missing zerocopy reference in pskb_carve helpers

Published Jun 24, 2026 · Updated Nov 10, 2026 · Assigned by Linux

Vendor: Linux Product: Linux Package: kernel Package: linux Package: linux Package: linux-allwinner-5.19 Package: linux-aws Package: linux-aws-5.0 Package: linux-aws-5.11 Package: linux-aws-5.13 Package: linux-aws-5.15 Package: linux-aws-5.19 Package: linux-aws-5.3 Package: linux-aws-5.4 Package: linux-aws-5.8 Package: linux-aws-6.14 Package: linux-aws-6.17 Package: linux-aws-6.2 Package: linux-aws-6.5 Package: linux-aws-6.8 Package: linux-aws-fips Package: linux-aws-hwe Package: linux-azure Package: linux-azure-4.15 Package: linux-azure-5.11 Package: linux-azure-5.13 Package: linux-azure-5.15 Package: linux-azure-5.19 Package: linux-azure-5.3 Package: linux-azure-5.4 Package: linux-azure-5.8 Package: linux-azure-6.11 Package: linux-azure-6.14 Package: linux-azure-6.17 Package: linux-azure-6.2 Package: linux-azure-6.5 Package: linux-azure-6.8 Package: linux-azure-7.0 Package: linux-azure-edge Package: linux-azure-fde Package: linux-azure-fde-5.15 Package: linux-azure-fde-5.19 Package: linux-azure-fde-6.14 Package: linux-azure-fde-6.17 Package: linux-azure-fde-6.2 Package: linux-azure-fde-6.8 Package: linux-azure-fde-7.0 Package: linux-azure-fips Package: linux-azure-nvidia Package: linux-azure-nvidia-6.14 Package: linux-bluefield Package: linux-fips Package: linux-gcp Package: linux-gcp-4.15 Package: linux-gcp-5.11 Package: linux-gcp-5.13 Package: linux-gcp-5.15 Package: linux-gcp-5.19 Package: linux-gcp-5.3 Package: linux-gcp-5.4 Package: linux-gcp-5.8 Package: linux-gcp-6.11 Package: linux-gcp-6.14 Package: linux-gcp-6.17 Package: linux-gcp-6.2 Package: linux-gcp-6.5 Package: linux-gcp-6.8 Package: linux-gcp-7.0 Package: linux-gcp-fips Package: linux-gke Package: linux-gke-4.15 Package: linux-gke-5.15 Package: linux-gke-5.4 Package: linux-gkeop Package: linux-gkeop-5.15 Package: linux-gkeop-5.4 Package: linux-hwe Package: linux-hwe-5.11 Package: linux-hwe-5.13 Package: linux-hwe-5.15 Package: linux-hwe-5.19 Package: linux-hwe-5.4 Package: linux-hwe-5.8 Package: linux-hwe-6.11 Package: linux-hwe-6.14 Package: linux-hwe-6.17 Package: linux-hwe-6.2 Package: linux-hwe-6.5 Package: linux-hwe-6.8 Package: linux-hwe-7.0 Package: linux-hwe-edge Package: linux-ibm Package: linux-ibm-5.15 Package: linux-ibm-5.4 Package: linux-ibm-6.8 Package: linux-intel-5.13 Package: linux-intel-iot-realtime Package: linux-intel-iotg Package: linux-intel-iotg-5.15 Package: linux-iot Package: linux-kvm Package: linux-lowlatency Package: linux-lowlatency-hwe-5.15 Package: linux-lowlatency-hwe-5.19 Package: linux-lowlatency-hwe-6.11 Package: linux-lowlatency-hwe-6.2 Package: linux-lowlatency-hwe-6.5 Package: linux-lowlatency-hwe-6.8 Package: linux-nvidia Package: linux-nvidia-6.11 Package: linux-nvidia-6.17 Package: linux-nvidia-6.2 Package: linux-nvidia-6.5 Package: linux-nvidia-6.8 Package: linux-nvidia-7.0 Package: linux-nvidia-bos Package: linux-nvidia-lowlatency Package: linux-nvidia-tegra Package: linux-nvidia-tegra-5.15 Package: linux-nvidia-tegra-igx Package: linux-oem Package: linux-oem-5.10 Package: linux-oem-5.13 Package: linux-oem-5.14 Package: linux-oem-5.17 Package: linux-oem-5.6 Package: linux-oem-6.0 Package: linux-oem-6.1 Package: linux-oem-6.11 Package: linux-oem-6.14 Package: linux-oem-6.17 Package: linux-oem-6.5 Package: linux-oem-6.8 Package: linux-oem-7.0 Package: linux-oracle Package: linux-oracle-5.0 Package: linux-oracle-5.11 Package: linux-oracle-5.13 Package: linux-oracle-5.15 Package: linux-oracle-5.3 Package: linux-oracle-5.4 Package: linux-oracle-5.8 Package: linux-oracle-6.14 Package: linux-oracle-6.17 Package: linux-oracle-6.5 Package: linux-oracle-6.8 Package: linux-oracle-7.0 Package: linux-raspi Package: linux-raspi-5.4 Package: linux-raspi-realtime Package: linux-raspi2 Package: linux-realtime Package: linux-realtime-6.14 Package: linux-realtime-6.17 Package: linux-realtime-6.8 Package: linux-riscv Package: linux-riscv-5.11 Package: linux-riscv-5.15 Package: linux-riscv-5.19 Package: linux-riscv-5.8 Package: linux-riscv-6.14 Package: linux-riscv-6.17 Package: linux-riscv-6.5 Package: linux-riscv-6.8 Package: linux-riscv-7.0 Package: linux-starfive-5.19 Package: linux-starfive-6.2 Package: linux-starfive-6.5 Package: linux-vmware Package: linux-xilinx Package: linux-xilinx-zynqmp Platform: Linux Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Ubuntu

Description

In the Linux kernel, the following vulnerability has been resolved:

net: skbuff: fix missing zerocopy reference in pskb_carve helpers

pskb_carve_inside_header() and pskb_carve_inside_nonlinear() both copy
the old skb_shared_info header into a new buffer via memcpy(), which
includes the destructor_arg pointer (uarg) for MSG_ZEROCOPY skbs.
Neither function calls net_zcopy_get() for the new shinfo, creating an
unaccounted holder: every skb_shared_info with destructor_arg set will
call skb_zcopy_clear() once when freed, but the corresponding
net_zcopy_get() was never called for the new copy. Repeated calls
drive uarg->refcnt to zero prematurely, freeing ubuf_info_msgzc while
TX skbs still hold live destructor_arg pointers.

KASAN reports use-after-free on a freed ubuf_info_msgzc:

BUG: KASAN: slab-use-after-free in skb_release_data+0x77b/0x810
Read of size 8 at addr ffff88801574d3e8 by task poc/220

Call Trace:
skb_release_data+0x77b/0x810
kfree_skb_list_reason+0x13e/0x610
skb_release_data+0x4cd/0x810
sk_skb_reason_drop+0xf3/0x340
skb_queue_purge_reason+0x282/0x440
rds_tcp_inc_free+0x1e/0x30
rds_recvmsg+0x354/0x1780
__sys_recvmsg+0xdf/0x180

Allocated by task 219:
msg_zerocopy_realloc+0x157/0x7b0
tcp_sendmsg_locked+0x2892/0x3ba0

Freed by task 219:
ip_recv_error+0x74a/0xb10
tcp_recvmsg+0x475/0x530

The skb consuming the late access still referenced the same uarg via
shinfo->destructor_arg copied by pskb_carve_inside_nonlinear() without
a refcount bump. This has been verified to be reliably exploitable: a
working proof-of-concept achieves full root privilege escalation from
an unprivileged local user on a default kernel configuration.

The fix follows the pattern of pskb_expand_head() which has the same
memcpy/cloned structure. For pskb_carve_inside_header(), net_zcopy_get()
is placed after skb_orphan_frags() succeeds, so the orphan error path
needs no cleanup. For pskb_carve_inside_nonlinear(), net_zcopy_get() is
placed after all failure points and just before skb_release_data(), so
no error path needs cleanup at all -- matching pskb_expand_head() more
closely and avoiding the need for a balancing net_zcopy_put().

Affected products

VendorProductAffectedFixed
Linux Linux 4.7 5.10.259

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 linux 7.0.12-1 —
Debian 13 linux 6.12.94-1 —
Debian 12 linux 6.1.176-1 —
ReleasePackageFixed inAdvisory
Ubuntu Nvidia-BlueField 24.04 LTS linux-bluefield 6.8.0-1032.37 —
Ubuntu Nvidia-BlueField 22.04 LTS linux-bluefield 5.15.0-1101.103 —
Ubuntu 26.04 LTS linux 7.0.0-28.28 USN-8566-1
Ubuntu 26.04 LTS linux-aws +2 7.0.0-1009.9 USN-8618-1, USN-8603-1, USN-8568-1
Ubuntu 26.04 LTS linux-gcp +1 7.0.0-1008.8 USN-8593-1, USN-8566-1
Ubuntu 26.04 LTS linux-gke 7.0.0-1003.4 USN-8566-1
Ubuntu 26.04 LTS linux-ibm +1 7.0.0-1010.10 USN-8603-1, USN-8593-1
Ubuntu 26.04 LTS linux-nvidia 7.0.0-1016.16 USN-8663-1
Ubuntu 26.04 LTS linux-nvidia-bos 7.0.0-2016.16 USN-8664-1
Ubuntu 26.04 LTS linux-raspi 7.0.0-1015.15 USN-8618-1
Ubuntu 26.04 LTS linux-riscv +1 7.0.0-28.28.1 USN-8566-1
Ubuntu 25.10 linux +8 No fix yet —
Ubuntu 24.04 LTS linux 6.8.0-146.146 USN-8903-1
Ubuntu 24.04 LTS linux-aws 6.8.0-1066.69 USN-8903-1
Ubuntu 24.04 LTS linux-azure-7.0 7.0.0-1014.14~24.04.1 USN-8728-2
Ubuntu 24.04 LTS linux-azure-fde 6.8.0-1068.75 USN-8904-1
Ubuntu 24.04 LTS linux-azure-fde-7.0 7.0.0-1013.13~24.04.1 —
Ubuntu 24.04 LTS linux-gcp +1 6.8.0-1070.78 USN-8905-2, USN-8904-1
Ubuntu 24.04 LTS linux-gcp-7.0 +1 7.0.0-1011.11~24.04.1 USN-8728-3, USN-8728-1
Ubuntu 24.04 LTS linux-gke 6.8.0-1065.73 USN-8903-2
Ubuntu 24.04 LTS linux-gkeop 6.8.0-1051.55 USN-8903-2
Ubuntu 24.04 LTS linux-hwe-7.0 7.0.0-28.28~24.04.1 USN-8569-1
Ubuntu 24.04 LTS linux-ibm 6.8.0-1066.67 USN-8903-2
Ubuntu 24.04 LTS linux-lowlatency 6.8.0-146.146.1 USN-8903-2
Ubuntu 24.04 LTS linux-nvidia 6.8.0-1064.67 USN-8903-2
Ubuntu 24.04 LTS linux-nvidia-7.0 7.0.0-1016.16~24.04.1 USN-8663-1
Ubuntu 24.04 LTS linux-nvidia-lowlatency 6.8.0-1064.67.1 USN-8903-2
Ubuntu 24.04 LTS linux-nvidia-tegra 6.8.0-1036.39 USN-8886-1
Ubuntu 24.04 LTS linux-oracle 6.8.0-1063.66 USN-8903-2
Ubuntu 24.04 LTS linux-raspi 6.8.0-1068.72 USN-9025-1
Ubuntu 24.04 LTS linux-riscv +29 No fix yet —
Ubuntu 24.04 LTS linux-riscv-7.0 7.0.0-28.28.1~24.04.3 —
Ubuntu 24.04 LTS linux-vmware 6.8.0-1008.8 —
Show 17 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 22.04 LTS linux 5.15.0-198.208 USN-8875-1
Ubuntu 22.04 LTS linux-aws 5.15.0-1117.124 USN-8875-1
Ubuntu 22.04 LTS linux-aws-6.8 6.8.0-1066.69~22.04.1 USN-8903-1
Ubuntu 22.04 LTS linux-azure 5.15.0-1123.132 USN-8875-1
Ubuntu 22.04 LTS linux-azure-fde 5.15.0-1122.131 USN-8876-1
Ubuntu 22.04 LTS linux-azure-fde-6.8 6.8.0-1068.75~22.04.1 USN-8904-1
Ubuntu 22.04 LTS linux-gcp 5.15.0-1118.128 USN-8877-1
Ubuntu 22.04 LTS linux-gcp-6.8 +1 6.8.0-1070.78~22.04.1 USN-8905-1, USN-8904-1
Ubuntu 22.04 LTS linux-gke 5.15.0-1113.119 USN-8875-1
Ubuntu 22.04 LTS linux-gkeop 5.15.0-1100.108 USN-8875-1
Ubuntu 22.04 LTS linux-hwe-6.8 6.8.0-149.149~22.04.1 USN-9066-1
Ubuntu 22.04 LTS linux-ibm 5.15.0-1111.115 USN-8875-1
Ubuntu 22.04 LTS linux-ibm-6.8 6.8.0-1066.67~22.04.1 USN-8906-1
Ubuntu 22.04 LTS linux-intel-iotg 5.15.0-1112.118 USN-8875-1
Ubuntu 22.04 LTS linux-kvm 5.15.0-1109.114 USN-8875-1
Ubuntu 22.04 LTS linux-lowlatency 5.15.0-195.205 USN-8875-1
Ubuntu 22.04 LTS linux-lowlatency-hwe-6.8 6.8.0-146.146.1~22.04.1 USN-8903-2
Ubuntu 22.04 LTS linux-nvidia 5.15.0-1112.113 USN-8875-2
Ubuntu 22.04 LTS linux-nvidia-6.8 6.8.0-1064.67~22.04.1 USN-8903-2
Ubuntu 22.04 LTS linux-nvidia-tegra 5.15.0-1070.72 USN-8963-1
Ubuntu 22.04 LTS linux-nvidia-tegra-igx 5.15.0-1059.59 USN-8963-1
Ubuntu 22.04 LTS linux-oracle 5.15.0-1114.120 USN-8875-1
Ubuntu 22.04 LTS linux-oracle-6.8 6.8.0-1067.71~22.04.1 USN-9025-1
Ubuntu 22.04 LTS linux-raspi 5.15.0-1113.116 USN-9029-1
Ubuntu 22.04 LTS linux-riscv +32 No fix yet —
Ubuntu 22.04 LTS linux-riscv-6.8 6.8.0-146.146~22.04.1 —
Ubuntu 22.04 LTS linux-xilinx-zynqmp 5.15.0-1080.84 USN-8875-1
Ubuntu 20.04 LTS linux-gke +28 No fix yet —
Ubuntu 18.04 LTS linux-gcp +14 No fix yet —
Ubuntu 16.04 LTS linux-hwe-edge No fix yet —
Ubuntu Pro Realtime 24.04 LTS linux-raspi-realtime 6.8.0-2056.58 USN-9025-1
Ubuntu Pro Realtime 24.04 LTS linux-realtime 6.8.1-1061.62 USN-8903-1
Ubuntu Pro Realtime 24.04 LTS linux-realtime-6.14 +1 No fix yet —
Ubuntu Pro Realtime 22.04 LTS linux-intel-iot-realtime 5.15.0-1109.111 USN-8875-1
Ubuntu Pro Realtime 22.04 LTS linux-realtime 5.15.0-1116.125 USN-8875-1
Ubuntu Pro Realtime 22.04 LTS linux-realtime-6.8 6.8.1-1061.62~22.04.1 USN-8903-1
Ubuntu Pro FIPS 20.04 LTS linux-fips +3 No fix yet —
Ubuntu Pro FIPS 18.04 LTS linux-fips +3 No fix yet —
Ubuntu Pro FIPS-updates 24.04 LTS linux-aws-fips 6.8.0-1066.69+fips1 USN-8903-1
Ubuntu Pro FIPS-updates 24.04 LTS linux-azure-fips 6.8.0-1069.77+fips1 USN-8904-1
Ubuntu Pro FIPS-updates 24.04 LTS linux-fips 6.8.0-146.146+fips1 USN-8903-1
Ubuntu Pro FIPS-updates 24.04 LTS linux-gcp-fips 6.8.0-1070.78+fips1 USN-8905-1
Ubuntu Pro FIPS-updates 22.04 LTS linux-aws-fips 5.15.0-1117.124+fips1 USN-8875-1
Ubuntu Pro FIPS-updates 22.04 LTS linux-azure-fips 5.15.0-1123.132+fips1 USN-8875-1
Ubuntu Pro FIPS-updates 22.04 LTS linux-fips 5.15.0-198.208+fips1 USN-8875-1
Ubuntu Pro FIPS-updates 22.04 LTS linux-gcp-fips 5.15.0-1118.128+fips1 USN-8877-1
Ubuntu Pro FIPS-updates 20.04 LTS linux-fips +3 No fix yet —
Ubuntu Pro FIPS-updates 18.04 LTS linux-fips +3 No fix yet —
Ubuntu Pro FIPS-preview 22.04 LTS linux-fips +3 No fix yet —
Ubuntu Pro 20.04 LTS linux +10 No fix yet —
Ubuntu Pro 20.04 LTS linux-aws-5.15 5.15.0-1117.124~20.04.1 USN-8875-1
Ubuntu Pro 20.04 LTS linux-azure-5.15 5.15.0-1123.132~20.04.1 USN-8875-1
Ubuntu Pro 20.04 LTS linux-azure-fde-5.15 5.15.0-1122.131~20.04.1 USN-8875-1
Ubuntu Pro 20.04 LTS linux-gcp-5.15 5.15.0-1118.128~20.04.1 USN-8878-1
Ubuntu Pro 20.04 LTS linux-hwe-5.15 5.15.0-198.208~20.04.1 USN-8875-1
Ubuntu Pro 20.04 LTS linux-ibm-5.15 +1 5.15.0-1111.115~20.04.1 USN-8875-1
Ubuntu Pro 20.04 LTS linux-intel-iotg-5.15 5.15.0-1112.118~20.04.1 USN-8875-1
Ubuntu Pro 20.04 LTS linux-lowlatency-hwe-5.15 5.15.0-195.205~20.04.1 USN-8875-1
Ubuntu Pro 20.04 LTS linux-nvidia-tegra-5.15 5.15.0-1070.72~20.04.1 USN-8963-1
Ubuntu Pro 20.04 LTS linux-oracle-5.15 5.15.0-1114.120~20.04.1 USN-8879-1
Ubuntu Pro 18.04 LTS linux +12 No fix yet —
Ubuntu Pro 16.04 LTS linux-gcp +4 No fix yet —
Ubuntu Pro 14.04 LTS linux-azure No fix yet —
ReleasePackageFixed inAdvisory
SLES 15 SP7 kernel-64kb +6 6.4.0-150700.53.66.1 SUSE-SU-2026:2800-1
SLES 15 SP7 kernel-default-base 6.4.0-150700.53.66.1.150700.17.39.1 SUSE-SU-2026:2800-1
SLES 15 SP7 kernel-docs 6.4.0-150700.53.66.2 SUSE-SU-2026:2800-1
SLES 15 SP6 kernel-64kb +6 6.4.0-150600.23.125.1 SUSE-SU-2026:3156-1
SLES 15 SP6 kernel-default-base 6.4.0-150600.23.125.1.150600.12.58.3 SUSE-SU-2026:3156-1
SLES 15 SP5 kernel-64kb +6 5.14.21-150500.55.177.1 SUSE-SU-2026:3089-1
SLES 15 SP5 kernel-default-base 5.14.21-150500.55.177.1.150500.6.83.2 SUSE-SU-2026:3089-1
SLES 15 SP4 kernel-64kb +6 5.14.21-150400.24.228.1 SUSE-SU-2026:3044-1
SLES 15 SP4 kernel-default-base 5.14.21-150400.24.228.1.150400.24.116.1 SUSE-SU-2026:3044-1
Show 18 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 16.0 kernel-64kb +8 6.12.0-160000.36.1 SUSE-SU-2026:22835-1
SLES for SAP 16.0 kernel-default-base 6.12.0-160000.36.1.160000.2.17 SUSE-SU-2026:22835-1
SLES for SAP 16.0 kernel-livepatch-SLE16_Update_0 15-160000.4.3 SUSE-SU-2026:22872-1
SLES for SAP 16.0 kernel-livepatch-SLE16_Update_1 13-160000.1.1 SUSE-SU-2026:22864-1
SLES for SAP 16.0 kernel-livepatch-SLE16_Update_12 +1 2-160000.1.1 SUSE-SU-2026:22871-1, SUSE-SU-2026:22866-1
SLES for SAP 16.0 kernel-livepatch-SLE16_Update_13 2-160000.1.2 SUSE-SU-2026:22879-1
SLES for SAP 16.0 kernel-livepatch-SLE16_Update_2 11-160000.1.1 SUSE-SU-2026:22876-1
SLES for SAP 16.0 kernel-livepatch-SLE16_Update_3 10-160000.1.1 SUSE-SU-2026:22869-1
SLES for SAP 16.0 kernel-livepatch-SLE16_Update_4 9-160000.1.1 SUSE-SU-2026:22867-1
SLES for SAP 16.0 kernel-livepatch-SLE16_Update_5 8-160000.1.1 SUSE-SU-2026:22874-1
SLES for SAP 16.0 kernel-livepatch-SLE16_Update_6 7-160000.1.1 SUSE-SU-2026:22873-1
SLES for SAP 16.0 kernel-livepatch-SLE16_Update_7 6-160000.1.1 SUSE-SU-2026:22868-1
SLES for SAP 16.0 kernel-livepatch-SLE16_Update_8 5-160000.1.1 SUSE-SU-2026:22875-1
SLES for SAP 16.0 kernel-livepatch-SLE16_Update_9 +2 4-160000.1.1 SUSE-SU-2026:22877-1, SUSE-SU-2026:22870-1, SUSE-SU-2026:22865-1
SLES for SAP 15 SP6 kernel-default-base 6.4.0-150600.23.125.1.150600.12.58.3 SUSE-SU-2026:3156-1
SLES for SAP 15 SP6 kernel-docs +4 6.4.0-150600.23.125.1 SUSE-SU-2026:3156-1
SLES for SAP 15 SP5 kernel-default-base 5.14.21-150500.55.177.1.150500.6.83.2 SUSE-SU-2026:3089-1
SLES for SAP 15 SP5 kernel-docs +4 5.14.21-150500.55.177.1 SUSE-SU-2026:3089-1
SLES for SAP 15 SP4 kernel-default-base 5.14.21-150400.24.228.1.150400.24.116.1 SUSE-SU-2026:3044-1
SLES for SAP 15 SP4 kernel-docs +4 5.14.21-150400.24.228.1 SUSE-SU-2026:3044-1
SLES 16.0 kernel-64kb +8 6.12.0-160000.36.1 SUSE-SU-2026:22835-1, SUSE-SU-2026:22812-1
SLES 16.0 kernel-default-base 6.12.0-160000.36.1.160000.2.17 SUSE-SU-2026:22835-1
SLES 16.0 kernel-livepatch-SLE16_Update_0 15-160000.4.3 SUSE-SU-2026:22872-1
SLES 16.0 kernel-livepatch-SLE16_Update_1 13-160000.1.1 SUSE-SU-2026:22864-1
SLES 16.0 kernel-livepatch-SLE16_Update_12 +1 2-160000.1.1 SUSE-SU-2026:22871-1, SUSE-SU-2026:22866-1
SLES 16.0 kernel-livepatch-SLE16_Update_13 2-160000.1.2 SUSE-SU-2026:22879-1
SLES 16.0 kernel-livepatch-SLE16_Update_2 11-160000.1.1 SUSE-SU-2026:22876-1
SLES 16.0 kernel-livepatch-SLE16_Update_3 10-160000.1.1 SUSE-SU-2026:22869-1
SLES 16.0 kernel-livepatch-SLE16_Update_4 9-160000.1.1 SUSE-SU-2026:22867-1
SLES 16.0 kernel-livepatch-SLE16_Update_5 8-160000.1.1 SUSE-SU-2026:22874-1
SLES 16.0 kernel-livepatch-SLE16_Update_6 7-160000.1.1 SUSE-SU-2026:22873-1
SLES 16.0 kernel-livepatch-SLE16_Update_7 6-160000.1.1 SUSE-SU-2026:22868-1
SLES 16.0 kernel-livepatch-SLE16_Update_8 5-160000.1.1 SUSE-SU-2026:22875-1
SLES 16.0 kernel-livepatch-SLE16_Update_9 +2 4-160000.1.1 SUSE-SU-2026:22877-1, SUSE-SU-2026:22870-1, SUSE-SU-2026:22865-1
SLE Micro 6.2 kernel-default-base 6.12.0-160000.36.1.160000.2.17 SUSE-SU-2026:22769-1
SLE Micro 6.2 kernel-livepatch-SLE16-RT_Update_0 13-160000.3.4 SUSE-SU-2026:22785-1
SLE Micro 6.2 kernel-livepatch-SLE16-RT_Update_1 12-160000.1.1 SUSE-SU-2026:22784-1
SLE Micro 6.2 kernel-livepatch-SLE16_Update_0 15-160000.4.3 SUSE-SU-2026:22755-1
SLE Micro 6.2 kernel-livepatch-SLE16_Update_1 13-160000.1.1 SUSE-SU-2026:22743-1
SLE Micro 6.2 kernel-livepatch-SLE16_Update_12 +4 2-160000.1.1 SUSE-SU-2026:22779-1, SUSE-SU-2026:22774-1, SUSE-SU-2026:22773-1
SLE Micro 6.2 kernel-livepatch-SLE16_Update_13 2-160000.1.2 SUSE-SU-2026:22766-1
SLE Micro 6.2 kernel-livepatch-SLE16_Update_2 11-160000.1.1 SUSE-SU-2026:22761-1
SLE Micro 6.2 kernel-livepatch-SLE16_Update_3 +1 10-160000.1.1 SUSE-SU-2026:22783-1, SUSE-SU-2026:22748-1
SLE Micro 6.2 kernel-livepatch-SLE16_Update_4 +2 9-160000.1.1 SUSE-SU-2026:22786-1, SUSE-SU-2026:22782-1, SUSE-SU-2026:22746-1
SLE Micro 6.2 kernel-livepatch-SLE16_Update_5 +1 8-160000.1.1 SUSE-SU-2026:22778-1, SUSE-SU-2026:22759-1
SLE Micro 6.2 kernel-livepatch-SLE16_Update_6 +1 7-160000.1.1 SUSE-SU-2026:22777-1, SUSE-SU-2026:22758-1
SLE Micro 6.2 kernel-livepatch-SLE16_Update_7 +1 6-160000.1.1 SUSE-SU-2026:22776-1, SUSE-SU-2026:22747-1
SLE Micro 6.2 kernel-livepatch-SLE16_Update_8 +1 5-160000.1.1 SUSE-SU-2026:22781-1, SUSE-SU-2026:22762-1
SLE Micro 6.2 kernel-livepatch-SLE16_Update_9 +5 4-160000.1.1 SUSE-SU-2026:22780-1, SUSE-SU-2026:22775-1, SUSE-SU-2026:22763-1
SLE Micro 6.2 kernel-rt +5 6.12.0-160000.36.1 SUSE-SU-2026:22769-1, SUSE-SU-2026:22742-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0-RT_Update_10 18-1.1 SUSE-SU-2026:22914-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0-RT_Update_13 +1 9-1.1 SUSE-SU-2026:22696-1, SUSE-SU-2026:22689-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0-RT_Update_22 3-1.2 SUSE-SU-2026:22695-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0-RT_Update_9 18-1.2 SUSE-SU-2026:22912-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0_Update_10 +1 14-1.1 SUSE-SU-2026:22915-1, SUSE-SU-2026:22673-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0_Update_11 +2 13-1.1 SUSE-SU-2026:22913-1, SUSE-SU-2026:22675-1, SUSE-SU-2026:22674-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0_Update_13 11-1.1 SUSE-SU-2026:22676-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0_Update_14 9-1.2 SUSE-SU-2026:22682-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0_Update_16 +1 8-1.1 SUSE-SU-2026:22690-1, SUSE-SU-2026:22677-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0_Update_17 +1 7-1.1 SUSE-SU-2026:22691-1, SUSE-SU-2026:22683-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0_Update_18 +1 6-1.1 SUSE-SU-2026:22692-1, SUSE-SU-2026:22684-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0_Update_19 +1 4-1.1 SUSE-SU-2026:22693-1, SUSE-SU-2026:22685-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0_Update_20 +5 3-1.1 SUSE-SU-2026:22697-1, SUSE-SU-2026:22694-1, SUSE-SU-2026:22687-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0_Update_24 +3 2-1.1 SUSE-SU-2026:23100-1, SUSE-SU-2026:23079-1, SUSE-SU-2026:22698-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0_Update_8 +1 20-1.2 SUSE-SU-2026:22681-1, SUSE-SU-2026:22680-1
SLE Micro 6.1 kernel-rt +4 6.4.0-49.1 SUSE-SU-2026:22666-1, SUSE-SU-2026:22665-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0-RT_Update_10 18-1.1 SUSE-SU-2026:22794-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0-RT_Update_13 +1 9-1.1 SUSE-SU-2026:22725-1, SUSE-SU-2026:22711-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0-RT_Update_22 3-1.2 SUSE-SU-2026:22717-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0-RT_Update_9 18-1.2 SUSE-SU-2026:22792-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0_Update_10 +1 14-1.1 SUSE-SU-2026:22795-1, SUSE-SU-2026:22718-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0_Update_11 +2 13-1.1 SUSE-SU-2026:22793-1, SUSE-SU-2026:22720-1, SUSE-SU-2026:22719-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0_Update_13 11-1.1 SUSE-SU-2026:22721-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0_Update_14 9-1.2 SUSE-SU-2026:22730-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0_Update_16 +1 8-1.1 SUSE-SU-2026:22722-1, SUSE-SU-2026:22712-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0_Update_17 +1 7-1.1 SUSE-SU-2026:22731-1, SUSE-SU-2026:22713-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0_Update_18 +1 6-1.1 SUSE-SU-2026:22732-1, SUSE-SU-2026:22714-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0_Update_19 +1 4-1.1 SUSE-SU-2026:22733-1, SUSE-SU-2026:22715-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0_Update_20 +5 3-1.1 SUSE-SU-2026:22735-1, SUSE-SU-2026:22734-1, SUSE-SU-2026:22726-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0_Update_24 +3 2-1.1 SUSE-SU-2026:23031-1, SUSE-SU-2026:23010-1, SUSE-SU-2026:22727-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0_Update_8 +1 20-1.2 SUSE-SU-2026:22729-1, SUSE-SU-2026:22728-1
SLE Micro 6.0 kernel-rt +4 6.4.0-49.1 SUSE-SU-2026:22522-1, SUSE-SU-2026:22521-1
SLE Micro 5.5 kernel-default-base 5.14.21-150500.55.177.1.150500.6.83.2 SUSE-SU-2026:3089-1
SLE Micro 5.5 kernel-rt +1 5.14.21-150500.13.151.1 SUSE-SU-2026:2840-1
SLE Micro 5.5 kernel-source +1 5.14.21-150500.55.177.1 SUSE-SU-2026:3089-1
SLE Micro 5.4 kernel-default-base 5.14.21-150400.24.228.1.150400.24.116.1 SUSE-SU-2026:3044-1
SLE Micro 5.4 kernel-rt +1 5.14.21-150400.15.176.1 SUSE-SU-2026:2841-1
SLE Micro 5.4 kernel-source +1 5.14.21-150400.24.228.1 SUSE-SU-2026:3044-1
SLE Micro 5.3 kernel-default-base 5.14.21-150400.24.228.1.150400.24.116.1 SUSE-SU-2026:3044-1
SLE Micro 5.3 kernel-rt +1 5.14.21-150400.15.176.1 SUSE-SU-2026:2841-1
SLE Micro 5.3 kernel-source +1 5.14.21-150400.24.228.1 SUSE-SU-2026:3044-1
SLE Live Patching 15 SP7 kernel-default 6.4.0-150700.53.66.1 SUSE-SU-2026:2800-1
SLE Live Patching 15 SP7 kernel-livepatch-SLE15-SP7-RT_Update_11 6-150700.2.1 SUSE-SU-2026:2855-1
SLE Live Patching 15 SP7 kernel-livepatch-SLE15-SP7-RT_Update_17 1-150700.1.3.1 SUSE-SU-2026:2799-1
SLE Live Patching 15 SP7 kernel-livepatch-SLE15-SP7-RT_Update_8 9-150700.2.1 SUSE-SU-2026:2857-1
SLE Live Patching 15 SP7 kernel-livepatch-SLE15-SP7-RT_Update_9 8-150700.2.1 SUSE-SU-2026:2858-1
SLE Live Patching 15 SP7 kernel-livepatch-SLE15-SP7_Update_1 19-150700.2.2 SUSE-SU-2026:2930-1
SLE Live Patching 15 SP7 kernel-livepatch-SLE15-SP7_Update_10 +1 6-150700.2.2 SUSE-SU-2026:2956-1, SUSE-SU-2026:2945-1
SLE Live Patching 15 SP7 kernel-livepatch-SLE15-SP7_Update_12 5-150700.2.2 SUSE-SU-2026:2887-1
SLE Live Patching 15 SP7 kernel-livepatch-SLE15-SP7_Update_14 3-150700.2.2 SUSE-SU-2026:2943-1
SLE Live Patching 15 SP7 kernel-livepatch-SLE15-SP7_Update_15 +1 2-150700.2.2 SUSE-SU-2026:3083-1, SUSE-SU-2026:3075-1
SLE Live Patching 15 SP7 kernel-livepatch-SLE15-SP7_Update_17 +2 2-150700.2.1 SUSE-SU-2026:3369-1, SUSE-SU-2026:2863-1, SUSE-SU-2026:2862-1
SLE Live Patching 15 SP7 kernel-livepatch-SLE15-SP7_Update_18 1-150700.15.3.1 SUSE-SU-2026:2800-1
SLE Live Patching 15 SP7 kernel-livepatch-SLE15-SP7_Update_7 9-150700.2.2 SUSE-SU-2026:2902-1
SLE Live Patching 15 SP7 kernel-livepatch-SLE15-SP7_Update_9 8-150700.2.2 SUSE-SU-2026:2895-1
SLE Live Patching 15 SP6 kernel-default 6.4.0-150600.23.125.1 SUSE-SU-2026:3156-1
SLE Live Patching 15 SP6 kernel-livepatch-SLE15-SP6_Update_12 20-150600.2.2 SUSE-SU-2026:2894-1
SLE Live Patching 15 SP6 kernel-livepatch-SLE15-SP6_Update_13 18-150600.2.2 SUSE-SU-2026:2902-1
SLE Live Patching 15 SP6 kernel-livepatch-SLE15-SP6_Update_22 6-150600.2.2 SUSE-SU-2026:2866-1
SLE Live Patching 15 SP6 kernel-livepatch-SLE15-SP6_Update_23 5-150600.2.2 SUSE-SU-2026:2957-1
SLE Live Patching 15 SP6 kernel-livepatch-SLE15-SP6_Update_25 +1 3-150600.2.2 SUSE-SU-2026:2997-1, SUSE-SU-2026:2945-1
SLE Live Patching 15 SP6 kernel-livepatch-SLE15-SP6_Update_27 +1 2-150600.2.2 SUSE-SU-2026:3008-1, SUSE-SU-2026:3002-1
SLE Live Patching 15 SP6 kernel-livepatch-SLE15-SP6_Update_29 1-150600.13.7.1 SUSE-SU-2026:3156-1
SLE Live Patching 15 SP5 kernel-default 5.14.21-150500.55.177.1 SUSE-SU-2026:3089-1
SLE Live Patching 15 SP5 kernel-livepatch-SLE15-SP5_Update_27 21-150500.2.2 SUSE-SU-2026:2899-1
SLE Live Patching 15 SP5 kernel-livepatch-SLE15-SP5_Update_28 20-150500.2.2 SUSE-SU-2026:2933-1
SLE Live Patching 15 SP5 kernel-livepatch-SLE15-SP5_Update_30 15-150500.2.2 SUSE-SU-2026:2868-1
SLE Live Patching 15 SP5 kernel-livepatch-SLE15-SP5_Update_31 13-150500.2.2 SUSE-SU-2026:2890-1
SLE Live Patching 15 SP5 kernel-livepatch-SLE15-SP5_Update_37 6-150500.2.2 SUSE-SU-2026:2938-1
SLE Live Patching 15 SP5 kernel-livepatch-SLE15-SP5_Update_39 4-150500.2.2 SUSE-SU-2026:2961-1
SLE Live Patching 15 SP5 kernel-livepatch-SLE15-SP5_Update_40 +2 2-150500.2.2 SUSE-SU-2026:3009-1, SUSE-SU-2026:3001-1, SUSE-SU-2026:2989-1
SLE Live Patching 15 SP5 kernel-livepatch-SLE15-SP5_Update_43 1-150500.11.5.1 SUSE-SU-2026:3089-1
SLE Live Patching 15 SP4 kernel-default 5.14.21-150400.24.228.1 SUSE-SU-2026:3044-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4_Update_41 21-150400.2.1 SUSE-SU-2026:2867-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4_Update_43 17-150400.2.1 SUSE-SU-2026:2920-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4_Update_44 16-150400.2.1 SUSE-SU-2026:2889-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4_Update_45 14-150400.2.1 SUSE-SU-2026:2864-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4_Update_46 10-150400.2.1 SUSE-SU-2026:2910-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4_Update_49 6-150400.2.1 SUSE-SU-2026:2932-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4_Update_51 5-150400.2.1 SUSE-SU-2026:2937-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4_Update_52 4-150400.2.1 SUSE-SU-2026:2888-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4_Update_54 +2 2-150400.2.1 SUSE-SU-2026:3009-1, SUSE-SU-2026:2993-1, SUSE-SU-2026:2991-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4_Update_57 1-150400.9.3.1 SUSE-SU-2026:3044-1
SLE HPC 15 SP5 kernel-64kb +5 5.14.21-150500.55.177.1 SUSE-SU-2026:3089-1
SLE HPC 15 SP5 kernel-default-base 5.14.21-150500.55.177.1.150500.6.83.2 SUSE-SU-2026:3089-1
SLE HPC 15 SP4 kernel-64kb +5 5.14.21-150400.24.228.1 SUSE-SU-2026:3044-1
SLE HPC 15 SP4 kernel-default-base 5.14.21-150400.24.228.1.150400.24.116.1 SUSE-SU-2026:3044-1
SUSE Real Time Module 15 SP7 kernel-rt +2 6.4.0-150700.7.62.1 SUSE-SU-2026:2799-1
ReleasePackageFixed inAdvisory
openSUSE Leap 16.0 kernel-default-base 6.12.0-160000.36.1.160000.2.17 openSUSE-SU-2026:21388-1
openSUSE Leap 16.0 kernel-rt +11 6.12.0-160000.36.1 openSUSE-SU-2026:21388-1

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 kernel-livepatch-6.18.35-68.127 +2 1:1.0-0.amzn2023 ALAS2023-2026-1968, ALAS2023-2026-1924, ALAS2023-2026-1881
Amazon Linux 2023 perf +11 1:6.1.176-220.358.amzn2023 ALAS2023-2026-1924
Amazon Linux 2023 perf6.12 +11 1:6.12.94-123.174.amzn2023 ALAS2023-2026-1968
Amazon Linux 2023 perf6.18 +12 1:6.18.35-68.127.amzn2023 ALAS2023-2026-1881

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 kernel 6.6.143.1-1 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 9 kernel-uek +34 6.12.0-203.76.7.6.el10uek ELSA-2026-500150, ELSA-2026-50372, ELSA-2026-50351
Oracle Linux 8 bpftool +18 5.15.0-321.202.5.3.el9uek ELSA-2026-50373, ELSA-2026-50352
Oracle Linux 7 kernel-uek +6 5.4.17-2136.356.4.3.el8uek ELSA-2026-50374, ELSA-2026-50353
Oracle Linux 7 kernel-uek-tools 5.4.17-2136.356.4.3.el7uek ELSA-2026-50374, ELSA-2026-50353

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

  • vn-lazyming/CVE-2026-52943 ★ 8 · Jun 16, 2026

    This is a Linux Kernel Local Privilege Escalation PoC code for CVE-2026-52943 a use-after-free in skbuff.c, my first 0day found by me in linux kernel

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Advisories 50

References