CVE-2026-72041

A flaw was found in the Linux kernel's espintcp component. This vulnerability arises from incorrect message accounting when handling partial send operations. This could lead to inconsistencies in how network messages are managed, potentially causing unexpected behavior or resource management issues within the kernel.

This vulnerability is rated as Moderate severity because triggering the issue requires local user privileges to initiate IPsec traffic over TCP encapsulation, restricting the blast radius to a system denial of service. While ESP in TCP support is enabled in standard Red Hat Enterprise Linux kernels, typical environments rarely utilize this encapsulation method without specific IPsec VPN configurations traversing restrictive middleboxes. Consequently, exploitation is confined to local environments actively transmitting encapsulated packets, preventing remote code execution or unauthorized data exposure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.