A use-after-free vulnerability in the Linux kernel's TCP implementation was fixed by correcting the handling of request socket references in the reqsk_timer_handler() function. The flaw involved improper use of the reqsk_put() function, which could lead to use-after-free when a request socket was migrated but a retry attempt failed, such as due to a timeout.