PT-2026-91307

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix use-after-free in ip6 finish output2 ip6 finish output2 caches a pointer to the IPv6 destination address daddr before invoking lwtunnel xmit. The LWT-BPF transmit path or other encapsulation operations within lwtunnel...

PT-2026-85633

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free read exists in the ip6 finish output2 function. The function caches a pointer to the IPv6 destination address daddr before calling lwtunnel xmit. During the LWT-BPF...