CVE-2026-68284 bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg()

🗓️ 10 Aug 2026 12:02:16Reported by LinuxType

Fix cork use-after-free in tcp_bpf_sendmsg for sockmap by checking the local temporary message directly.

Reporter	Title	Published	Views	Family All 21
CBLMariner	CVE-2026-68284 affecting package kernel for versions less than 6.6.150.1-1	12 Aug 202623:21	–	cbl_mariner
Circl	CVE-2026-68284	10 Aug 202616:07	–	circl
CVE	CVE-2026-68284	10 Aug 202612:02	–	cve
Debian	[SECURITY] [DLA 4745-1] linux-6.12 security update	18 Aug 202610:51	–	debian
Debian CVE	CVE-2026-68284	10 Aug 202612:02	–	debiancve
Tenable Nessus	Debian dla-4745 : ata-modules-6.12.100+deb12-armmp-di - security update	18 Aug 202600:00	–	nessus
Tenable Nessus	Photon OS 5.0: Linux PHSA-2026-5.0-92-0952	12 Aug 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-68284	10 Aug 202600:00	–	nessus
EUVD	EUVD-2026-55385	10 Aug 202612:02	–	euvd
Mageia	Updated kernel, kmod-xtables-addons, kmod-virtualbox, kmod-nvidia-current-wopengpu & drakx-installer-images packages fix security vulnerabilities	25 Aug 202607:50	–	mageia

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "net/ipv4/tcp_bpf.c"
    ],
    "versions": [
      {
        "version": "604326b41a6fb9b4a78b6179335decee0365cd8c",
        "lessThan": "0688e6fe599d2d39147ae9ece97944c6e1815ebf",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "604326b41a6fb9b4a78b6179335decee0365cd8c",
        "lessThan": "b2bcbeabfd843d47468fa095b1bd08ddb90cf616",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "604326b41a6fb9b4a78b6179335decee0365cd8c",
        "lessThan": "54be47e7cbb936429c3bbdfc526ea943954aaf80",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "604326b41a6fb9b4a78b6179335decee0365cd8c",
        "lessThan": "ee762f684eefa59de34d9ed93cab08336e834f47",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "604326b41a6fb9b4a78b6179335decee0365cd8c",
        "lessThan": "cde4d6bcd9b73073c66498f6723c7b364c4dbc18",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "604326b41a6fb9b4a78b6179335decee0365cd8c",
        "lessThan": "786d690257ec7a0c839f8710456e444ce3f1348b",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "604326b41a6fb9b4a78b6179335decee0365cd8c",
        "lessThan": "752b1159ed5d0c48fe169a3721b96660a9822aa1",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "604326b41a6fb9b4a78b6179335decee0365cd8c",
        "lessThan": "2d66a033864e27ab8d5e44cb36f31d9d2413bee4",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "net/ipv4/tcp_bpf.c"
    ],
    "versions": [
      {
        "version": "4.20",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "4.20",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.265",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.216",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.183",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.148",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.101",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.42",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.1.6",
        "lessThanOrEqual": "7.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.2",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/b2bcbeabfd843d47468fa095b1bd08ddb90cf616
git	www.git.kernel.org/stable/c/786d690257ec7a0c839f8710456e444ce3f1348b
git	www.git.kernel.org/stable/c/2d66a033864e27ab8d5e44cb36f31d9d2413bee4
git	www.git.kernel.org/stable/c/0688e6fe599d2d39147ae9ece97944c6e1815ebf
git	www.git.kernel.org/stable/c/cde4d6bcd9b73073c66498f6723c7b364c4dbc18
git	www.git.kernel.org/stable/c/54be47e7cbb936429c3bbdfc526ea943954aaf80
git	www.git.kernel.org/stable/c/752b1159ed5d0c48fe169a3721b96660a9822aa1
git	www.git.kernel.org/stable/c/ee762f684eefa59de34d9ed93cab08336e834f47

19 Aug 2026 16:32Current

CVSS 3.17.8

EPSS0.00135