Threats tagged 'ghsa-52mq-7c45-jwp5'

CVE-2026-43016 is a use-after-free vulnerability in the Linux kernel's BPF sockmap implementation. It involves improper handling of the sk->sk_socket pointer in the sk_psock_verdict_data_ready() function, which can lead to accessing freed memory. This flaw was reported by syzbot and relates to AF_UNIX sockets where the peer socket's sk_socket may be freed after an RCU grace period despite reference counting. The vulnerability has a high severity score of 7.8 CVSS v3.1.