PT-2026-51876 · Linux · Linux Kernel

Published 2026-06-24 · Updated 2026-06-24 · CVE-2026-52982

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the rtl8150 start xmit() function within the net: usb: rtl8150 component. The problem occurs when accessing the skb->len variable for transmission statistics after usb submit urb() has been called. Because the URB completion handler write bulk callback() can free the socket buffer (skb) via dev kfree skb irq() on another CPU before the submitter returns, a read operation on skb->len may occur after the memory has been freed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-52982

Affected Products

Linux Kernel

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2026-52982 · Security Note
• https://git.kernel.org/stable/c/30cf9829d09ca958279c937af8e35495cd2f1e09 · Note
• https://git.kernel.org/stable/c/24831b0b2ada9fef18d1f486b7b7c444ee5ba637 · Note
• https://git.kernel.org/stable/c/5db090ca07b28a63fb1499690cf19a3f3adafacb · Note
• https://twitter.com/vuldb/status/2069851366215094478 · Twitter Post
• https://git.kernel.org/stable/c/23f0e34c64acba15cad4d23e50f41f533da195fa · Note
• https://git.kernel.org/stable/c/4dd7eb94f79486b77ca6b4c8676aedbc465dc802 · Note
• https://git.kernel.org/stable/c/423b5b86e14e190f6e3161eb5f2ea5f908295ba7 · Note
• https://git.kernel.org/stable/c/6999d70e0eda39af029fa1891c48f0a8832b09d5 · Note
• https://git.kernel.org/stable/c/5af290c86fa81ddbc86a08d54229af5daa40c6a4 · Note