CVE-2026-72299

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description In the Linux kernel, the tipc sk enqueue() function runs while the socket is owned by user context. Although a spinlock protects the backlog queue, it does not serialize against the socket owner consuming or purging the sk receive queue. Consequently, the TIPC DUMP ALL tracepoints in tipc sk enqueue() may dump the sk receive queue and dereference socket buffer (skb) structures that have already been dequeued or freed by the socket owner.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.