ACK: [SRU][Q][PATCH 0/1] CVE-2026-52982

[Tim Whisonant]

On Thu, Jul 16, 2026 at 05:35:44PM +0300, Cengiz Can via kernel-team wrote:
> https://ubuntu.com/security/CVE-2026-52982
> 
> [ Impact ]
> 
> A use-after-free flaw exists in the rtl8150 USB Ethernet driver in
> rtl8150_start_xmit(). After usb_submit_urb() is called, the URB may complete on
> another CPU in softirq context and free the skb via the write_bulk_callback()
> handler before the submitter reads skb->len for tx statistics. This results in
> a slab-use-after-free read, reported by syzbot via KASAN, which can lead to
> memory corruption or a crash.
> 
> [ Fix ]
> 
> questing: clean cherry-pick
> focal: backported with AI-assisted adaptation
> bionic: backported with AI-assisted adaptation
> xenial: backported with AI-assisted adaptation
> trusty: backported with AI-assisted adaptation
> 
> [ Test Plan ]
> 
> Boot tested.
> 
> [ Where Problems Could Occur ]
> 
> A regression in this fix could affect tx statistics accounting or packet
> transmission in the rtl8150 USB Ethernet driver. Incorrect caching of the frame
> length could result in inaccurate tx_bytes counters for devices using this
> driver.
> 

Acked-by: Tim Whisonant <tim.whisonant at canonical.com>