CVE-2026-68117

The CVE-2026-68117 issue affects the Linux kernel’s Transparent Inter-Process Communication (TIPC) socket path. When tipc_sk_create() fails to insert a new socket during accept(), sock->sk can point to a freed object, enabling a use-after-free write in lock_sock_nested and potentially crashing...

CVE-2026-68117 tipc: clear sock->sk on the failed-insert path in tipc_sk_create()

In the Linux kernel, the following vulnerability has been resolved: tipc: clear sock-sk on the failed-insert path in tipcskcreate When tipcskcreate fails to insert the new socket tipcskinsert returns non-zero, its error path frees the sk with skfree but leaves sock-sk pointing at the freed object...