Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-52982

In the Linux kernel, the following vulnerability has been resolved: net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit() syzbot reported a KASAN slab-use-after-free read in rtl8150_start_xmit() when accessing skb->len for tx statistics after usb_submit_urb() has been called: BUG: KASAN: slab-use-after-free in rtl8150_start_xmit+0x71f/0x760 drivers/net/usb/rtl8150.c:712 Read of size 4 at addr ffff88810eb7a930 by task kworker/0:4/5226 The URB completion handler write_bulk_call
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:6d1ed7542965fa2d842952e30ca3b5c51a7a20d9af3e850daf61784354a2496e
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/net/usb/rtl8150.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.12"},{"lessThan":"2.6.12","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:592d424a6432478702f2d4f2b21914087e23021306cb4c1d76461e268a045e24 · sha256:8804468d4b430f66… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/net/usb/rtl8150.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"5af290c86fa81ddbc86a08d54229af5daa40c6a4","status":"affected","version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","versionType":"git"},{"lessThan":"24831b0b2ada9fef18d1f486b7b7c444ee5ba637","status":"affected","version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","versionType":"git"},{"lessThan":"423b5b86e14e190f6e3161eb5f2ea5f908295ba7","status":"affected","version":"1da177e4c3f41524e886…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:592d424a6432478702f2d4f2b21914087e23021306cb4c1d76461e268a045e24 · sha256:8804468d4b430f66… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/net/usb/rtl8150.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.12"},{"lessThan":"2.6.12","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:592d424a6432478702f2d4f2b21914087e23021306cb4c1d76461e268a045e24 · sha256:8804468d4b430f66… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/net/usb/rtl8150.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"5af290c86fa81ddbc86a08d54229af5daa40c6a4","status":"affected","version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","versionType":"git"},{"lessThan":"24831b0b2ada9fef18d1f486b7b7c444ee5ba637","status":"affected","version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","versionType":"git"},{"lessThan":"423b5b86e14e190f6e3161eb5f2ea5f908295ba7","status":"affected","version":"1da177e4c3f41524e886…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:592d424a6432478702f2d4f2b21914087e23021306cb4c1d76461e268a045e24 · sha256:8804468d4b430f66… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion
{"metric":{"baseScore":9.8,"baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:592d424a6432478702f2d4f2b21914087e23021306cb4c1d76461e268a045e24 · sha256:8804468d4b430f66… · /containers/cna/metrics/0/cvssV3_1

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/23f0e34c64acba15cad4d23e50f41f533da195fa"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:592d424a6432478702f2d4f2b21914087e23021306cb4c1d76461e268a045e24 · sha256:8804468d4b430f66… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/24831b0b2ada9fef18d1f486b7b7c444ee5ba637"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:592d424a6432478702f2d4f2b21914087e23021306cb4c1d76461e268a045e24 · sha256:8804468d4b430f66… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/30cf9829d09ca958279c937af8e35495cd2f1e09"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:592d424a6432478702f2d4f2b21914087e23021306cb4c1d76461e268a045e24 · sha256:8804468d4b430f66… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/423b5b86e14e190f6e3161eb5f2ea5f908295ba7"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:592d424a6432478702f2d4f2b21914087e23021306cb4c1d76461e268a045e24 · sha256:8804468d4b430f66… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/4dd7eb94f79486b77ca6b4c8676aedbc465dc802"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:592d424a6432478702f2d4f2b21914087e23021306cb4c1d76461e268a045e24 · sha256:8804468d4b430f66… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/5af290c86fa81ddbc86a08d54229af5daa40c6a4"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:592d424a6432478702f2d4f2b21914087e23021306cb4c1d76461e268a045e24 · sha256:8804468d4b430f66… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/5db090ca07b28a63fb1499690cf19a3f3adafacb"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:592d424a6432478702f2d4f2b21914087e23021306cb4c1d76461e268a045e24 · sha256:8804468d4b430f66… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/6999d70e0eda39af029fa1891c48f0a8832b09d5"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:592d424a6432478702f2d4f2b21914087e23021306cb4c1d76461e268a045e24 · sha256:8804468d4b430f66… · /containers/cna/references/5

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer