CVE-2026-98374 tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack()

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "net/ipv4/tcp_output.c"
    ],
    "versions": [
      {
        "version": "c31b70c9968fe9c4194d1b5d06d07596a3b680de",
        "lessThan": "fad6d429651e748365e93ca54645accc212f0018",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "c31b70c9968fe9c4194d1b5d06d07596a3b680de",
        "lessThan": "c5b4da1f403a658c1c19766be2b426003ada419f",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "c31b70c9968fe9c4194d1b5d06d07596a3b680de",
        "lessThan": "71d45049b0d631dfdbf3c65305f7fca676de023b",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "c31b70c9968fe9c4194d1b5d06d07596a3b680de",
        "lessThan": "e3ea71cb1408a013ed4e8a757b815f1a919324bd",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "c31b70c9968fe9c4194d1b5d06d07596a3b680de",
        "lessThan": "631aa4cb45099f09e9385dd786bd291c6270bfc4",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "c31b70c9968fe9c4194d1b5d06d07596a3b680de",
        "lessThan": "0f87720c7e4bcab07c24888b3cf12bfe857bb90e",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "c31b70c9968fe9c4194d1b5d06d07596a3b680de",
        "lessThan": "fe99bbeee5c5dbd3abc30721a8079ced59649d97",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "net/ipv4/tcp_output.c"
    ],
    "versions": [
      {
        "version": "5.11",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "5.11",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.222",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.189",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.158",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.112",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.55",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.2.9",
        "lessThanOrEqual": "7.2.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.3-rc5",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]