CVE-2026-68140

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the af iucv component. The system queues not-yet-received message notifications on iucv->message q, which hold raw pointers to the connection's iucv path. When a peer severs the connection, the iucv sever path() function frees the path using iucv path free() but fails to remove the queued notifications. Subsequently, a recvmsg() call triggers iucv process message q(), which passes the stale path to message receive(), resulting in a use-after-free of the iucv path object.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.