Connect your agent
AdvisoriesCriticalCheck your lockfilePluginHow it worksPricing Connect your agent

CVE record · CVE-2026-72041

espintcp: use sk_msg_free_partial to fix partial send

CVSS 9.8 CriticalCriticalEPSS 0.0071 · 53rd percentile

Critical, because:

  • CVSS score 9.8: 9.0 or more.

How we decide what’s critical

Published by the CVE Program (CNA: Linux) at 15 Aug 2026, 05:52 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected e27cca96cd68fa2c6814c90f9a1cfd36bb68c593 to before 518dcb84b997dff461800b079e5f2596389f766a git
  • affected e27cca96cd68fa2c6814c90f9a1cfd36bb68c593 to before 4ea8c051b4bd7feec7749a980f2f70e1782b84d7 git
  • affected e27cca96cd68fa2c6814c90f9a1cfd36bb68c593 to before a977f78adce40b39d90d9567e7987bb110102810 git
  • affected e27cca96cd68fa2c6814c90f9a1cfd36bb68c593 to before 54d73f18f8919735f4d04d6f43374f75756c0180 git
  • affected e27cca96cd68fa2c6814c90f9a1cfd36bb68c593 to before 14c0b42c8a2cd9b5361bbff45b52f69c62c6a286 git
  • affected e27cca96cd68fa2c6814c90f9a1cfd36bb68c593 to before a66d45e0ce6d73cd79962d422388e61bfaf0cb50 git
  • affected e27cca96cd68fa2c6814c90f9a1cfd36bb68c593 to before a338ce41bc933d8f74c39d9b3b6f1d8ca53d9714 git
  • affected e27cca96cd68fa2c6814c90f9a1cfd36bb68c593 to before 007800408002d871f5699bdb944f985896730b8f git
Other versions: unaffected
Linux Linux
  • affected 5.6
  • unaffected before 5.6 semver
  • unaffected 5.10.266 to 5.10.*, inclusive semver
  • unaffected 5.15.217 to 5.15.*, inclusive semver
  • unaffected 6.1.184 to 6.1.*, inclusive semver
  • unaffected 6.6.145 to 6.6.*, inclusive semver
  • unaffected 6.12.97 to 6.12.*, inclusive semver
  • unaffected 6.18.40 to 6.18.*, inclusive semver
  • unaffected 7.1.5 to 7.1.*, inclusive semver
  • unaffected 7.2 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2026-72041
CNA
Linux
Weakness (CWE)
CWE-664
Tags
Published
15 Aug 2026
Updated
19 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

ScoreRatingCVSSVectorSource
9.8 Critical 3.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CNA (Linux)
  • CISA KEV Not listed.
  • EPSS 0.0071, the 53rd percentile, on 5 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 15 Aug 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.