CVE-2026-68399

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free (UAF) issue exists in the BPF subsystem during socket cloning. The sk clone() function performs a shallow copy of the sk bpf storage field via sock copy() for a cloned socket newsk. If sk clone() terminates early—for instance, if the sk filter charge() function fails—before bpf sk storage clone() is called, newsk->sk bpf storage continues to point to the parent socket's BPF local storage. When newsk is later released through sk free(), the deallocation sequence involving sk destruct() and bpf sk storage free() erroneously destroys the parent socket's BPF local storage, resulting in a use-after-free condition on the parent socket.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.