CVE-2026-80848

A use-after-free (UAF) vulnerability in the Linux kernel's xfrm/espintcp subsystem was reported by ZDI . The race condition occurs during socket close: espintcp_close() frees emsg->skb via kfree_skb() without holding a socket lock, while concurrently the xfrm_trans_reinject work queue invokes ...