{"uuid": "8f6ddfca-3b53-4291-ba4e-7eb23a2d4df1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52993", "type": "seen", "source": "https://gist.github.com/alon710/bbfd6c7aaddc1cfa8a14b655b855ccd4", "content": "# CVE-2026-52993: CVE-2026-52993: Double-Free Vulnerability in Linux Kernel TIPC Module\n\n> **CVSS Score:** 9.8\n> **Published:** 2026-06-24\n> **Full Report:** https://cvereports.com/reports/CVE-2026-52993\n\n## Summary\nA critical double-free vulnerability exists in the Transparent Inter-Process Communication (TIPC) module of the Linux kernel, specifically within the fragment reassembly implementation in `tipc_buf_append()`. This vulnerability can be triggered locally or remotely to cause kernel heap corruption, leading to local privilege escalation or denial of service.\n\n## TL;DR\nA double-free flaw in the Linux kernel's TIPC module allows local privilege escalation to root or remote kernel heap corruption via crafted network packets.\n\n## Exploit Status: WEAPONIZED\n\n## Technical Details\n\n- **CWE ID**: CWE-415\n- **Attack Vector**: Network (UDP Port 6118 or Ethernet Bearer)\n- **CVSS v3.1 Score**: 9.8 (Critical)\n- **Exploit Status**: PoC / Weaponized\n- **Primary Impact**: Local Privilege Escalation / Remote Heap Corruption\n- **CWE Name**: Double Free\n\n## Affected Systems\n\n- Linux Kernel\n- **Linux Kernel**: >= 4.15, < 5.10.258 (Fixed in: `5.10.258`)\n- **Linux Kernel**: >= 5.11, < 5.15.209 (Fixed in: `5.15.209`)\n- **Linux Kernel**: >= 5.16, < 6.1.175 (Fixed in: `6.1.175`)\n- **Linux Kernel**: >= 6.2, < 6.6.141 (Fixed in: `6.6.141`)\n- **Linux Kernel**: >= 6.7, < 6.12.91 (Fixed in: `6.12.91`)\n- **Linux Kernel**: >= 6.13, < 6.18.33 (Fixed in: `6.18.33`)\n- **Linux Kernel**: >= 6.19, < 7.0.10 (Fixed in: `7.0.10`)\n\n## Mitigation\n\n- Blacklist the TIPC kernel module to prevent it from loading into memory.\n- Restrict unprivileged user namespace creation to prevent loopback configuration.\n- Configure firewall rules to drop unauthorized UDP traffic on port 6118.\n\n**Remediation Steps:**\n1. Identify the current running kernel version using 'uname -r'.\n2. Update the system packages using the distribution package manager (e.g., 'apt update && apt upgrade' or 'dnf update').\n3. Reboot the system to load the patched kernel version.\n4. Verify that the loaded kernel version is equal to or higher than the patched releases (e.g., 5.10.258, 5.15.209, 6.1.175, 6.6.141, 6.12.91, 6.18.33, or 7.0.10).\n\n## References\n\n- [Linux Kernel Stable Patch](https://git.kernel.org/stable/c/d293ca716e7d5dffdaecaf6b9b2f857a33dc3d3a)\n- [Red Hat CVE-2026-52993 Security Advisory](https://access.redhat.com/security/cve/CVE-2026-52993)\n- [CaptainAI Labs LPE Exploit Repository](https://github.com/CaptainAI-Labs/CaptainAI-LPE-CVE-2026-52993)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-52993) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-10-06T10:00:31.000000Z"}