01 Record

CVE-2026-31518

esp: fix skb leak with espintcp and async crypto

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

esp: fix skb leak with espintcp and async crypto

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.13% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 2.9% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-07-14.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-04-22 13:54Z4 MO AGO

Last updated

2026-07-14 12:48Z1 MO AGO

Reserved

2026-03-09

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-401Missing Release of Memory after Effective LifetimeVariant
CWE-772Missing Release of Resource after Effective LifetimeBase

Data version

5.2

Document digest

ae7434317de4e145c208b37462ecc4c9308c089fbc6c0eab5e598b9cb5829c98

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxe27cca96cd68fa2c6814c90f9a1cfd36bb68c593 to < aca3ad0c262f54a5b5c95dda80a48365997d1224, e27cca96cd68fa2c6814c90f9a1cfd36bb68c593 to < 41aafca57de4a4c026701622bd4648f112a9edcd, e27cca96cd68fa2c6814c90f9a1cfd36bb68c593 to < 4820847e036ff1035b01b69ad68dfc17e7028fe9, e27cca96cd68fa2c6814c90f9a1cfd36bb68c593 to < 6a3ec6efbc4f90e0ccb2e71574f07351f19996f4, e27cca96cd68fa2c6814c90f9a1cfd36bb68c593 to < df6f995358dc1f3c42484f5cfe241d7bd3e1cd15, e27cca96cd68fa2c6814c90f9a1cfd36bb68c593 to < 88d386243ed374ac969dabd3bbc1409a31d81818, e27cca96cd68fa2c6814c90f9a1cfd36bb68c593 to < 6aa9841d917532d0f2d932d1ff2f3a94305aaf47, e27cca96cd68fa2c6814c90f9a1cfd36bb68c593 to < 0c0eef8ccd2413b0a10eb6bbd3442333b1e64dd2, 5.6—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/aca3ad0c262f54a5b5c95dda80a48365997d1224
git.kernel.orghttps://git.kernel.org/stable/c/41aafca57de4a4c026701622bd4648f112a9edcd
git.kernel.orghttps://git.kernel.org/stable/c/4820847e036ff1035b01b69ad68dfc17e7028fe9
git.kernel.orghttps://git.kernel.org/stable/c/6a3ec6efbc4f90e0ccb2e71574f07351f19996f4
git.kernel.orghttps://git.kernel.org/stable/c/df6f995358dc1f3c42484f5cfe241d7bd3e1cd15
git.kernel.orghttps://git.kernel.org/stable/c/88d386243ed374ac969dabd3bbc1409a31d81818
git.kernel.orghttps://git.kernel.org/stable/c/6aa9841d917532d0f2d932d1ff2f3a94305aaf47
git.kernel.orghttps://git.kernel.org/stable/c/0c0eef8ccd2413b0a10eb6bbd3442333b1e64dd2
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-082556.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-019113.html

01 Record index

CVE-2026-31518

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2026-31518

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References