Threats tagged 'ghsa-qp6h-4hvh-qqqc'

CVE-2026-98432 is a critical use-after-free vulnerability in the Linux kernel's IPv4 TCP request socket handling. It arises because the inet_opt and ireq_opt options are freed improperly without waiting for an RCU grace period, leading to potential memory corruption during SYNACK packet construction. IPv6 is not affected by the main issue but has a related migration issue to be patched separately.