SUSE CVE-2026-80850

In the Linux kernel, the following vulnerability has been resolved: tcp: fix AO info use-after-free in tcpaoconnectinit tcpv4connect adds a SYN-SENT socket to the ehash before calling tcpconnect. If TCP-AO is configured, tcpconnect first verifies that a key matches the peer and the bound device's...

Linux Distros Unpatched Vulnerability : CVE-2026-80850

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tcp: fix AO info use-after-free in tcpaoconnectinit tcpv4connect adds a SYN-SENT socket to the ehash before calling tcpconnect. If TCP-AO is configured,...

CVE-2024-40985

CVE-2024-40985 concerns the Linux kernel TCP-AO subsystem. The issue is described as: in net/tcp_ao, ao_info could be leaked on error-path, introduced with TCP_AO_CMDF_AO_REQUIRED in patch set version 5. The vulnerability’s root cause is an information leak during error handling in the TCP-AO cod...