CVE-2026-68284

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the bpf sockmap component. The tcp bpf sendmsg() function maintains the msg tx variable across the sk stream wait memory() function, which releases and subsequently reacquires the socket lock. In the error path, the system determines if msg tx refers to a local temporary message by comparing it to the current value of psock->cork. When two threads send data on the same socket, a race condition occurs where one thread may free the cork while the other is waiting for the lock. Upon reacquiring the lock, the second thread may mistakenly identify the stale cork as a local temporary message and attempt to free it again, leading to a slab-use-after-free.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.