CVE-2026-52974

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak occurs in the net: tls component when tls set device offload rx() fails during tls dev add(). In this error path, the function tls sw free resources rx() is called to clean up the software context initialized by tls set sw offload(). While this process stops the strparser via tls strp stop() and frees the context through tls sw free ctx rx(), it fails to free the anchor skb (socket buffer) that was allocated by alloc skb(0) in tls strp init(). This issue was introduced after the implementation of a non-standard strparser that pre-allocates an skb.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.