CVE-2026-68137

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the x25 kill by neigh() function. The function iterates through the global X.25 socket list to find sockets linked to a terminating neighbour. While x25 list lock protects the list during the search, it does not maintain the socket's lifetime once the lock is released. Because the function drops x25 list lock before calling lock sock(s), a concurrent close operation can trigger x25 release(), removing the socket from the list and dropping the final reference. This allows the neighbour teardown process to access or lock a freed struct sock or struct x25 sock.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.