Review reviewHigh

CVE-2026-53009

Linux Linux, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6

In the Linux kernel, the following vulnerability has been resolved: ice: fix double-free of tx_buf skb If ice_tso() or ice_tx_csum() fail, the error path in ice_xmit_frame_ring() frees the skb, but the 'first' tx_buf still points to it and is marked as valid (ICE_TX_BUF_SKB). 'next_to_use' remains unchanged, so the potential problem will likely fix itself when the next packet is transmitted and the tx_buf gets overwritten. But if there is no next packet and the interface is brought down instead, ice_clean_tx_ring() -> ice_unmap_and_free_tx_buf() will find the tx_buf and free the skb for the...

CVSS: 7.8
EPSS: 0.13%
CISA KEV: Not listed
Published: 2026.06.25

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability0.13%

Technical severityCVSS 7.8

Vulnerability overview

Affected product and versions

Product: Linux Linux, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6
Affected versions: >= d76a60ba7afb89523c88cf2ed3a044ce4180289e < 4c08fc2119ef0281cfa2cee007acf0a251be55f2, >= d76a60ba7afb89523c88cf2ed3a044ce4180289e < 1a303baa715e6b78d6a406aaf335f87ff35acfcd, >= 4.17, >= 4.17 < 7.0.10, 7.0, 8.0, 9.0, 10.0
Fixed versions: 7.0.10

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux Linux, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE: CWE-1341, CWE-415, CWE-416