CVE-2026-49412

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the kernel handler for IPV6 MSFILTER. The handler drops a serializing lock to copy the source-filter list from userspace and subsequently reacquires it. This creates a window where another thread can free the multicast filter structure, resulting in a stale pointer to freed memory. An unprivileged local user can exploit this condition to escalate privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.