PT-2026-51876 · Linux+2 · Linux Kernel+2

CVE-2026-52982

·

Published

2026-06-24

·

Updated

2026-09-10

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A use-after-free issue exists in the rtl8150 start xmit() function within the net: usb: rtl8150 component. The problem occurs when accessing the skb->len variable for transmission statistics after usb submit urb() has been called. Because the URB completion handler write bulk callback() can free the socket buffer (skb) via dev kfree skb irq() on another CPU before the submitter returns, a read operation on skb->len may occur after the memory has been freed.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-52982
ECHO-8FE0-C686-F6F5
OPENSUSE-SU-2026:21555-1
SUSE-SU-2026:23066-1
SUSE-SU-2026:23068-1
SUSE-SU-2026:23193-1
SUSE-SU-2026:23194-1
SUSE-SU-2026:23221-1
SUSE-SU-2026:23231-1
SUSE-SU-2026:23237-1
SUSE-SU-2026:23241-1
SUSE-SU-2026:23244-1
SUSE-SU-2026:3130-1
SUSE-SU-2026:3166-1
SUSE-SU-2026:3594-1
USN-8566-1
USN-8567-1
USN-8568-1
USN-8569-1
USN-8574-1
USN-8574-2
USN-8574-3
USN-8575-1
USN-8575-2
USN-8575-3
USN-8576-1
USN-8576-2
USN-8593-1
USN-8595-1
USN-8595-2
USN-8595-3
USN-8596-1
USN-8603-1
USN-8606-1
USN-8607-1
USN-8608-1
USN-8609-1
USN-8610-1
USN-8618-1
USN-8619-1
USN-8620-1
USN-8620-2
USN-8620-3
USN-8620-4
USN-8633-1
USN-8633-2
USN-8634-1
USN-8635-1
USN-8645-1
USN-8662-1
USN-8662-2
USN-8663-1
USN-8664-1
USN-8665-1
USN-8666-1
USN-8666-2
USN-8666-3
USN-8667-1
USN-8668-1
USN-8715-1
USN-8728-1
USN-8748-1

Affected Products

Linuxmint
Linux Kernel
Ubuntu