cve-2026-52935

CVE-2026-52935 is a Linux kernel vulnerability affecting the XFRM subsystem’s ESP-in-TCP path. The flaw can allow an unfinished partial send to be reused, triggering an out-of-bounds read in kernel networking code. Although it is not a Windows desktop vulnerability, the issue matters to Windows administrators whose environments include Linux through WSL, Azure, containers, appliances, or hybrid infrastructure. This tag covers the Microsoft Security Update Guide disclosure and the practical security response: identify where Linux kernels run within the broader Microsoft estate, assess exposure, and apply appropriate updates or mitigations. It is a reminder that effective Windows security management includes connected Linux systems.