CVE-2026-68377

CVE-2026-68377 affects the Linux kernel net/sched code, specifically the act_tunnel_key path. A race-condition use-after-free in tunnel_key_release_params() can occur because the function releases the old params’ metadata_dst synchronously via dst_release() while it defers freeing the params stru...