---
cve: "CVE-2026-72041"
severity: "CRITICAL"
cvss: 9.8
epss: "0.8%"
vendor: "Linux"
kev: false
exploited: false
published: "2026-08-15 05:52:00"
tags: [cve, security, critical]
source: tsecurity.de CVE-Dossier
exported: "2026-10-21T11:43:22+02:00"
---

# CVE-2026-72041

> 9.8 CRITICAL

## Beschreibung

In the Linux kernel, the following vulnerability has been resolved:

espintcp: use sk_msg_free_partial to fix partial send

sk_msg_free_partial() ensures consistency of the skmsg at every
iteration, without having to manually handle uncharges and offsets.
This simplifies the code, and fixes some bugs in skmsg accounting when
we don't send the full contents.

## CNA-Record (Kanon, cvelistV5)

- CNA: **Linux**
- State: PUBLISHED
- Stand: 2026-10-19 21:19:24
- CNA-CVSS: **9.8** (`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`)

## CISA-Anreicherung (vulnrichment/ADP)

- CISA-SSVC (Coordinator, v2.0.3):
  - Exploitation: **none**
  - Automatable: **yes**
  - Technical Impact: **total**

## CVSS-Vektor

```
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Netzwerk | bad |
| AC Komplexität | Gering | bad |
| PR Privilegien | Keine | bad |
| UI Interaktion | Keine | bad |
| S Scope | Unverändert | good |
| C Vertraulichkeit | Hoch | bad |
| I Integrität | Hoch | bad |
| A Verfügbarkeit | Hoch | bad |

## Schwachstellen-Klasse

- **CWE-664** — Improper Control of a Resource Through its Lifetime
  The product does not maintain or incorrectly maintains control over a resource throughout its lifetime of creation, use, and release.

## Angriffsmuster (CAPEC)

- [CAPEC-21 — Exploitation of Trusted Identifiers](https://capec.mitre.org/data/definitions/21.html) _(Severity: High)_
- [CAPEC-60 — Reusing Session IDs (aka Session Replay)](https://capec.mitre.org/data/definitions/60.html) _(Severity: High)_
- [CAPEC-61 — Session Fixation](https://capec.mitre.org/data/definitions/61.html) _(Severity: High)_
- [CAPEC-62 — Cross Site Request Forgery](https://capec.mitre.org/data/definitions/62.html) _(Severity: Very High)_
- [CAPEC-196 — Session Credential Falsification through Forging](https://capec.mitre.org/data/definitions/196.html) _(Severity: Medium)_

## ATT&CK-Techniken

- [T1134 — Access Token Manipulation](https://attack.mitre.org/techniques/T1134/)
- [T1528 — Steal Application Access Token](https://attack.mitre.org/techniques/T1528/)
- [T1539 — Steal Web Session Cookie](https://attack.mitre.org/techniques/T1539/)
- [T1134.001 — Access Token Manipulation:Token Impersonation/Theft](https://attack.mitre.org/techniques/T1134/001/)
- [T1550.004 — Use Alternate Authentication Material:Web Session Cookie](https://attack.mitre.org/techniques/T1550/004/)
- [T1134.002 — Access Token Manipulation: Create Process with Token](https://attack.mitre.org/techniques/T1134/002/)
- [T1134.003 — Access Token Manipulation: Make and Impersonate Token](https://attack.mitre.org/techniques/T1134/003/)
- [T1606 — Forge Web Credentials](https://attack.mitre.org/techniques/T1606/)

## Patch verfügbar (OSV)

- Kernel ≥ 5.10.266
- Kernel ≥ 5.15.217
- Kernel ≥ 6.1.184
- Kernel ≥ 6.6.145
- Kernel ≥ 6.12.97
- Kernel ≥ 6.18.40
- Kernel ≥ 7.1.5

## BSI-Hinweise (deutsch)

- [Linux Kernel: Mehrere Schwachstellen](https://wid.cert-bund.de/portal/wid/sicherheitshinweis/WID-SEC-W-2026-2852) — _BSI-Einstufung: hoch_
  Ein Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um einen Denial of Service herbeizuführen oder einen nicht näher spezifizierten Angriff durchzuführen.

## Referenzen

- <https://git.kernel.org/stable/c/518dcb84b997dff461800b079e5f2596389f766a>
- <https://git.kernel.org/stable/c/4ea8c051b4bd7feec7749a980f2f70e1782b84d7>
- <https://git.kernel.org/stable/c/a977f78adce40b39d90d9567e7987bb110102810>
- <https://git.kernel.org/stable/c/54d73f18f8919735f4d04d6f43374f75756c0180>
- <https://git.kernel.org/stable/c/14c0b42c8a2cd9b5361bbff45b52f69c62c6a286>
- <https://git.kernel.org/stable/c/a66d45e0ce6d73cd79962d422388e61bfaf0cb50>
- <https://git.kernel.org/stable/c/a338ce41bc933d8f74c39d9b3b6f1d8ca53d9714>
- <https://git.kernel.org/stable/c/007800408002d871f5699bdb944f985896730b8f>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/sicherheitsluecken/cve-2026-72041/) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI WID (CSAF)_