Search: CVE-2026-63795

CVE-2026-63795 is a critical use-after-free vulnerability in the Linux kernel's 9p client implementation. The flaw occurs in the p9_client_walk() function when called with clone set to false, causing an oldfid aliasing issue. If a walk operation fails after sending the request, the error path improperly drops a reference to oldfid, potentially destroying it while still in use. This can lead to use-after-free or reference count underflow errors. The issue is fixed by ensuring oldfid is only put when it is not aliased by fid in the error path.