The Linux kernel's 6LoWPAN code had a use-after-free vulnerability (CVE-2026-64452) in the lowpan_nhc_do_uncompression() function. The function looks up an NHC descriptor while holding a lock, but on an error path, it releases the lock before printing the descriptor's name. Meanwhile, another task could unregister and free the descriptor after synchronize_net() returns, leading to a race condition where the first task dereferences freed memory. The vulnerability was fixed by changing the code to print the warning while still holding the lock, preventing use-after-free access.

This vulnerability can cause a use-after-free memory access in the kernel, which may lead to kernel crashes or undefined behavior. There is no indication of remote code execution or privilege escalation in the provided data. The malformed packet causing the error is rejected, limiting impact to denial of service or system instability.

A fix is available and has been applied in the Linux kernel to address this use-after-free vulnerability by reordering operations to maintain locking during descriptor name access. Users should update to the fixed kernel version once available. Patch status is not explicitly confirmed in the provided data; check the official Linux kernel advisories or vendor updates for the exact fixed versions and apply them promptly.