CVE-2026-68397

The CVE concerns the Linux kernel net/iucv subsystem (AF_IUCV sockets). In afiucv_hs_rcv(), the destination socket is looked up under iucv_sk_list.lock, then released before the socket is passed to afiucv_hs_callback_*() handlers, allowing a concurrent close to free the socket in the window befor...