CVE-2026-52943

A flaw was found in the Linux kernel. The pskb_carve_inside_header() and pskb_carve_inside_nonlinear() helper functions, which handle network packet buffers, do not correctly account for zero-copy references. This oversight can lead to a use-after-free vulnerability, where memory is prematurely released while still in use. A local unprivileged user can exploit this flaw to achieve full root privilege escalation on the system.

This vulnerability in the Linux kernel is rated as Important severity due to the potential for local privilege escalation to root. No supported versions of Red Hat Enterprise Linux are affected as the vulnerable kernel module, Reliable Datagram Sockets (RDS), is not enabled in Red Hat Enterprise Linux.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.