VulnSocial

CVE-2026-52993Disclosure(linux / linux_kernel)

LOWCVSS 9.8 · CRITICAL

Exploit discussion active in current signal (5 latest mentions)

Immediate actions

  • Prioritize remediation for linux linux_kernel systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

In the Linux kernel, the following vulnerability has been resolved: tipc: fix double-free in tipc_buf_append() tipc_msg_validate() can potentially reallocate the skb it is validating, freeing the old one. In tipc_buf_append(), it was being called with a pointer to a local variable which was a copy of the caller's skb pointer. If the skb was reallocated and validation subsequently failed, the error handling path would free the original skb pointer, which had already been freed, leading to double-free. Fix this by checking if head now points to a newly allocated reassembled skb. If it does, reassign *headbuf for later freeing operations.

linux CVEsBack to dashboard
3.5/ 10 priority

Sources & remediation

Patch / fix
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-415CWE-763

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • linux_kernel

Threat summary

  • Public PoC and exploit tooling are both present
  • 7 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Exploit tool or code specified in 1 signal
  • PoC mentioned or linked in 2 signals
  • Technical details provided in 4 signals
  • Disclosure: 2 classified signals
  • Peaked at 5 mentions on most recent observed day (2026-10-01)
  • 7 total mentions across 3 days

Affected systems

Vendors
linux
Products
linux_kernel

Deep dive

Activity timeline7 mentions / 3d
01345Mentions · 2026-07-15: 1Mentions · 2026-09-23: 1Mentions · 2026-10-01: 5PoC Mentioned / Linked · 2026-10-01: 2Exploit Tool / Code · 2026-10-01: 1Technical Details · 2026-07-15: 1Technical Details · 2026-09-23: 1Technical Details · 2026-10-01: 207-1509-2310-01
Signal classification3 categories
Disclosure
250.0%
Exploit
125.0%
PoC
125.0%
Referenced assets6 URLs
Classification over time
DateTotalLabels
2026-07-151
Disclosure1
2026-09-231
Disclosure1
2026-10-015
Exploit1PoC1
Full discourse7 posts
  • dbugs@ptdbugs
    Exploit

    A PoC/exploit has been discovered for vulnerability CVE-2026-52993 PT ID: PT-2026-51887 Vendor: Linux Product: Linux Kernel Description: In the Linux kernel, the following vulnerability has been resolved: tipc: fix double-free in tipc_buf_append() tipc_msg_validate() can potentially reallocate the skb it is validating, freeing the old one. In tipc_buf_append(), it was being called with a pointer to a local variable which was a copy of the caller's skb pointer. If the skb was reallocated and validation subsequently failed, the error handling path would free the original skb pointer, which had already been freed, leading to double-free. Fix this by checking if head now points to a newly allocated reassembled skb. If it does, reassign *headbuf for later freeing operations. References: • https://dbu.gs/vulnerability/PT-2026-51887 • https://github.com/captainai-labs/captainai-lpe-cve-2026-52993

    Post summary

    The post announces a PoC/exploit for CVE-2026-52993, a double-free vulnerability in the Linux kernel's TIPC module, and provides a link to an exploit repository.

    0621652.4K
    3.7K followersView on X
  • ExploitGrid@exploitgrid

    🚨 CVE-2026-52993: Public exploit available. A Linux kernel TIPC double-free in tipc_buf_append() can trigger kernel memory corruption. CVSS 9.8 | Public exploit ExploitGrid: 39.3/100 🔎 https://exploitgrid.net/vulnerabilities/CVE-2026-52993

    00052722
    394 followersView on X
  • ExploitGrid@exploitgrid
    PoC

    🚨 PoC available for CVE-2026-52993, a Linux kernel TIPC double-free. The flaw can trigger memory corruption through tipc_buf_append(). CVSS 9.8 | Public exploit ExploitGrid: 39.3/100 | EPSS: 0.37% 🔎 https://exploitgrid.net/vulnerabilities/CVE-2026-52993

    Post summary

    The post announces the availability of a Proof of Concept (PoC) for CVE-2026-52993, a critical Linux kernel TIPC double-free vulnerability (CVSS 9.8), and directs readers to ExploitGrid for further details.

    00061506
    394 followersView on X
  • Rıdvan Yağlı@ridvanyagli

    🔴 Linux kernel TIPC'deki CVE-2026-52993 için PoC/exploit yayınlandı. Zafiyet, tipc_buf_append() içerisinde skb yeniden tahsis edildiğinde ortaya çıkan double-free nedeniyle kernel memory corruption'a yol açabiliyor. CVE kaydı zafiyeti CVSS 9.8 Critical olarak değerlendiriyor. Bu güvenlik açığı yamalandı. https://github.com/captainai-labs/captainai-lpe-cve-2026-52993

    01032366
    2.4K followersView on X
  • OSS開発者@hacker_infra

    緩和策 echo "install tipc /bin/true" > /etc/modprobe.d/disable-tipc.conf 既に修正パッケージは配布されている https://access.redhat.com/security/cve/cve-2026-52993

    00000195
    2.9K followersView on X
  • Kimberly@kmulkey906
    Disclosure

    CVE-2026-52993 • CRITICAL In the Linux kernel, the following vulnerability has been resolved: tipc: fix double-free in tipc_buf_append() tipc_msg_validate() can potentially reallocate the skb it is validating, freeing the old one. In tipc_buf_append( https://git.kernel.org/stable/c/d3556656c6daebf8def751c7e71d11dd0a180d24

    Post summary

    The text announces CVE-2026-52993, a critical double-free vulnerability in the Linux kernel's TIPC subsystem, providing technical details about the flaw and linking to the fix commit.

    0000035
    106 followersView on X
  • DailyCVE@dailycve
    Disclosure

    🔴 #Linux Kernel, Double-Free Vulnerability, #CVE-2026-52993 (High) -DC-Jul2026-966 https://dailycve.com/linux-kernel-double-free-vulnerability-cve-2026-52993-high-dc-jul2026-966/

    Post summary

    The post announces a high‑severity double‑free flaw (CVE‑2026‑52993) in the Linux kernel, but offers no further technical detail, PoC, or mitigation information.

    0000043
    219 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
OSlinuxlinux_kernel---

Explore more

Back to dashboardlinux CVEslinux_kernel vulnerabilities