CVE-2026-63979

CVE-2026-63979: In the Linux kernel, a use-after-free-like window can occur during TLS handshakes in net/handshake where accept-side dereferences use sock->file via req->hr_sk->sk_socket. The fix retargets dereferences to req->hr_file (pinned at submit time) and adds an extra file ref...

PT-2026-61296

In the Linux kernel, the following vulnerability has been resolved: net/handshake: hand off the pinned file reference to accept doit handshake req next removes the request from the per-net pending list and drops hn lock before handshake nl accept doit reads req-hr sk-sk socket and dereferences...