Linux Kernel · Linux Kernel
Updated November 6, 2026
A missing variable initialization permits unintended modification of page‑cache data during socket buffer coalescing, allowing crafted ESP packets to decrypt shared fragments in place. When chained with related CVEs, attackers can plant PHP web shells and execute commands as root.
Full system compromise on affected Linux hosts, potential deployment of ransomware or persistent backdoors with root privileges.
Update to the kernel version containing the fix; re‑compile any custom kernels with the patch applied; monitor for anomalous ESP traffic and validate kernel integrity.
More active vulnerabilities