PT-2026-52322 · Linux+1 · Linux Kernel+1

CVE-2026-53227

·

Published

2026-06-08

·

Updated

2026-09-07

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the openvswitch component where the allocation of the reply skb (socket buffer) may occur either before or after locking the ovs mutex. If the allocation happens after locking the mutex and fails, the reply variable is assigned an ERR PTR (an encoded error pointer). Because the error cleanup process follows a reversed order that assumes the allocation occurred before locking, the system attempts to free this invalid pointer using kfree skb(), leading to a potential system crash.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Use After Free

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

AZL-90860
BDU:2026-14051
CVE-2026-53227
ECHO-9726-897B-934C
OESA-2026-3204
OPENSUSE-SU-2026:21555-1
SUSE-SU-2026:23066-1
SUSE-SU-2026:23068-1
SUSE-SU-2026:23193-1
SUSE-SU-2026:23194-1
SUSE-SU-2026:23221-1
SUSE-SU-2026:23231-1
SUSE-SU-2026:23237-1
SUSE-SU-2026:23241-1
SUSE-SU-2026:23244-1
SUSE-SU-2026:3130-1
SUSE-SU-2026:3166-1
SUSE-SU-2026:3594-1
USN-8726-1
USN-8727-1
USN-8728-1

Affected Products

Linux Kernel
Ubuntu