CVE-2026-63872

CVE-2026-63872 affects the Linux kernel esp path (esp4/esp6) where, on skb_to_sgvec failure during esp_output_tail, old skb page fragments are not unrefsed when a second scatterlist build fails. The root cause: a page frag reference leak in the source scatterlist if the destination sgvec creation...

Linux Distros Unpatched Vulnerability : CVE-2026-63872

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - esp: fix page frag reference leak on skbtosgvec failure In espoutputtail, when esp-inplace is false, the old skb page frags are replaced with a new page from th...