CVE-2026-52935

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the xfrm espintcp component where the system may reuse an in-progress partial send. Specifically, the espintcp sendmsg() function may reinitialize emsg->skmsg and reuse ctx->partial while a previous transfer is still pending, as espintcp push msgs() can return success even if the partial send is still active for blocking callers. This memory-safety flaw can result in a stale offset being attached to a new sk msg, potentially leading to an out-of-bounds read in the send path.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.