EUVD-2026-45511

In the Linux kernel, the following vulnerability has been resolved: net/tcp-ao: fix use-after-free of key in delasync path In tcpaodeletekey, the delasync path skips the currentkey and rnextkey validity checks present in the synchronous path, assuming these pointers are always NULL on LISTEN...

CVE-2026-53389

CVE-2026-53389 affects the Linux kernel net/tcp-ao use-after-free in the del_async path when deleting a key. The root cause is that del_async omits current_key and rnext_key validity checks that exist in the synchronous path. If a key is added with set_current=1/set_rnext=1 while the socket is in...

CVE-2026-53389

In the Linux kernel, the following vulnerability has been resolved: net/tcp-ao: fix use-after-free of key in delasync path In tcpaodeletekey, the delasync path skips the currentkey and rnextkey validity checks present in the synchronous path, assuming these pointers are always NULL on LISTEN...

CVE-2026-53389 net/tcp-ao: fix use-after-free of key in del_async path

In the Linux kernel, the following vulnerability has been resolved: net/tcp-ao: fix use-after-free of key in delasync path In tcpaodeletekey, the delasync path skips the currentkey and rnextkey validity checks present in the synchronous path, assuming these pointers are always NULL on LISTEN...

PT-2026-61094

In the Linux kernel, the following vulnerability has been resolved: net/tcp-ao: fix use-after-free of key in del async path In tcp ao delete key, the del async path skips the current key and rnext key validity checks present in the synchronous path, assuming these pointers are always NULL on LIST...