CVE-2026-80995

A flaw was found in the Linux kernel's MCTP Message Control Transport Protocol networking implementation. This vulnerability arises because the mctproutelookup function accesses a route device without holding a persistent reference, allowing the device to be deallocated while still in use. A loca...

CVE-2026-80995

CVE-2026-80995 affects the MCTP (Management Component Transport Protocol) subsystem in the Linux kernel . The vulnerability is a use-after-free in mctp_route_lookup(), which accesses rt->dev without holding a reference on it. Because mctp_route_lookup_single() returns the route under RCU only,...