CVE-2026-53389 net/tcp-ao: fix use-after-free of key in del_async path

🗓️ 19 Jul 2026 12:01:54Reported by GoogleType

osv

osv🔗 osv.dev👁 3 Views

Fix use-after-free in del_async path of tcp ao by clearing current_key and rnext_key when deleting.

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2026-53389	19 Jul 202612:01	–	attackerkb
CVE	CVE-2026-53389	19 Jul 202612:01	–	cve
Cvelist	CVE-2026-53389 net/tcp-ao: fix use-after-free of key in del_async path	19 Jul 202612:01	–	cvelist
EUVD	EUVD-2026-45511	19 Jul 202612:01	–	euvd
NVD	CVE-2026-53389	19 Jul 202612:16	–	nvd
OSV	DEBIAN-CVE-2026-53389	19 Jul 202612:16	–	osv
OSV	UBUNTU-CVE-2026-53389	20 Jul 202600:00	–	osv
Positive Technologies	PT-2026-61094	19 Jul 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-53389	21 Jul 202605:12	–	redhatcve
SUSE CVE	SUSE CVE-2026-53389	19 Jul 202617:36	–	susecve

Source	Link
git	www.git.kernel.org/stable/c/5ba9950bc9078e19b69cca1e56d1553b125c6857
git	www.git.kernel.org/stable/c/6ce7ef41743740ce15c2061561b784148b565b3f
git	www.git.kernel.org/stable/c/7ddc29a094d96e9b3aa280433c6dc443df9eabf2
git	www.git.kernel.org/stable/c/e77fbefd1269b5c123e7c651a1ebdce1b87d19a0
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53389.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-53389
git	www.git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

21 Jul 2026 03:47Current

5.4Medium risk

Vulners AI Score5.4

CVSS 3.17.8

EPSS0.00168

Linux kernel tcp ao del async path current key rnext key use after free key deletion fix rcu grace period