Memory-Safety Flaw in Linux Kernel Affecting Transmission Processes

CVE-2026-52935

What is CVE-2026-52935?

A memory-safety vulnerability in the Linux kernel affects the espintcp transmission process. The issue arises due to improper handling of in-progress partial sends. When a new send message is initiated while a previous partial send is still ongoing, this can potentially lead to an out-of-bounds read. The proposed solution involves ensuring that espintcp does not attempt to rebuild a send message while a partial send is still active, thereby preserving the integrity of the transmission state and preventing memory safety issues.

References