2 matches found
CVE-2026-63979
CVE-2026-63979: In the Linux kernel, a use-after-free-like window can occur during TLS handshakes in net/handshake where accept-side dereferences use sock->file via req->hr_sk->sk_socket. The fix retargets dereferences to req->hr_file (pinned at submit time) and adds an extra file ref...
9.8CVSS5.4AI score0.00516EPSS
SaveExploits0References3
PT-2026-61296
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the net/handshake component. The handshake req next function removes a request from the pending list and releases the hn lock before handshake nl accept doit...
9.8CVSS5.8AI score0.00516EPSS
SaveExploits0
20