EUVD-2026-71299

In the Linux kernel, the following vulnerability has been resolved: net/tcp-ao: fix use-after-free of currentkey on reconnect to another peer tcpinboundaohash is called before bhlocksocknested is taken, with only rcureadlock held. On the fast path for established sockets, if the rnextkeyid sent b...

CVE-2026-80849

In the Linux kernel, the following vulnerability has been resolved: net/tcp-ao: fix use-after-free of currentkey on reconnect to another peer tcpinboundaohash is called before bhlocksocknested is taken, with only rcureadlock held. On the fast path for established sockets, if the rnextkeyid sent b...

CVE-2026-80849

This vulnerability affects the Linux kernel's TCP Address Obfuscation (TCP-AO) subsystem. The root cause is a use-after-free of current_key triggered when a socket is disconnected and connect() is called for a different peer. Because tcp_inbound_ao_hash() runs with only rcu_read_lock() held, a so...