CVE-2026-89789 gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free

🗓️ 16 Sep 2026 08:48:25Reported by GoogleType

osv🔗 osv.dev👁 5 Views

Use-after-free in Linux kernel gtp_newlink() error path via missing synchronize_net.

Source	Link
git	www.git.kernel.org/stable/c/3ca3da5c305caa873ddb81e8c6b118143f6dd3d1
git	www.git.kernel.org/stable/c/6f815c2fb6ab20385f81c353cdad0ea3b88132af
git	www.git.kernel.org/stable/c/7677eb2cbf2cc7446de474c01a6b06277c0051e5
git	www.git.kernel.org/stable/c/8d85498016a5bb56339734a14c276209fa65bafc
git	www.git.kernel.org/stable/c/d989e22ae9802c52c56ad4284d0caf26696cf6ae
git	www.git.kernel.org/stable/c/e3b9aa0773abd5d4ed90be41ce5306c146d5b09e
git	www.git.kernel.org/stable/c/fcafb2b1430824bae4258c01a439ec97ca0c6973
git	www.git.kernel.org/stable/c/fd8396cfecbd904468c71362f08aaa25f96d5337
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/89xxx/CVE-2026-89789.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-89789

18 Sep 2026 03:48Current

CVSS 3.17.8

gtp use-after-free synchronize_net gtp_newlink Linux kernel