CVE-2026-99116

In the Linux kernel, the following vulnerability has been resolved: net: psp: do not inherit the Rx association on clone sk-pspassoc sits past skdontcopyend, so sockcopy copies it into every socket accepted from a listener without taking a reference, while inetsockdestruct puts for every inet...

CVE-2026-99116

The Linux kernel is vulnerable to a slab-use-after-free issue within the network subsystem. The root cause is that sk->psp_assoc is copied into sockets accepted from a listener without proper reference counting. This allows child sockets (specifically those in TIME_WAIT) to hold a pointer to a...

EUVD-2026-112016

In the Linux kernel, the following vulnerability has been resolved: net: psp: do not inherit the Rx association on clone sk-pspassoc sits past skdontcopyend, so sockcopy copies it into every socket accepted from a listener without taking a reference, while inetsockdestruct puts for every inet...

PT-2026-128109

In the Linux kernel, the following vulnerability has been resolved: net: psp: do not inherit the Rx association on clone sk-psp assoc sits past sk dontcopy end, so sock copy copies it into every socket accepted from a listener without taking a reference, while inet sock destruct puts for every in...