CVE-2026-68140

In the Linux kernel, the following vulnerability has been resolved: net/iucv: fix use-after-free of a severed iucvpath afiucv queues not-yet-received message notifications on iucv-messageq, each holding a raw pointer to the connection's iucvpath. When the peer severs the connection, iucvseverpath...

CVE-2026-68140

CVE-2026-68140 pertains to the Linux kernel net/iucv path handling. The root cause is a use-after-free of a severed iucv_path: af_iucv queues not-yet-received message notifications that hold raw pointers to iucv_path; when the peer severs, iucv_path_free() frees the path but notifications remain ...