CVE-2026-99270

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.2

Description A use-after-free issue exists in the TCP request socket timer handler. When TCP socket migration fails at the inet ehash insert() function within reqsk timer handler(), the system may free the new request socket immediately using reqsk free() without first stopping the associated timer. This can lead to kernel memory corruption or a system crash.

Recommendations Update to Linux kernel version 4.2 or later.