Threats tagged 'ghsa-f9jq-9v6w-22v9'

CVE-2026-68399 is a use-after-free (UAF) vulnerability in the Linux kernel's BPF subsystem related to socket cloning. The flaw occurs when the socket cloning function sk_clone() bails out early, leaving a cloned socket's BPF storage pointer referencing the parent socket's storage. Subsequent freeing of the cloned socket causes the parent socket's BPF storage to be freed prematurely, leading to UAF. This vulnerability has been fixed by resetting the cloned socket's BPF storage pointer to NULL immediately after the shallow copy operation.