Linux Kernel reqsk_queue_hash_req Buffer Overflow DoS

The vulnerability of the reqskqueuehashreq function in the net/ipv4/inetconnectionsock.c module, part of the IPv4 protocol implementation in Linux kernel, relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality,...

CVE-2026-53260 tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req().

In the Linux kernel, the following vulnerability has been resolved: tcp: Add preemptdisable,enablenested in reqskqueuehashreq. syzbot reported a weird reqsk-rskrefcnt underflow in inetcskreqskqueuedrop. The captured reqskput in inetcskreqskqueuedrop is called only when it successfully removes req...

CVE-2026-53260: Use After Free

In the Linux kernel, the following vulnerability has been resolved: tcp: Add preemptdisable,enablenested in reqskqueuehashreq. syzbot reported a weird reqsk-rskrefcnt underflow in inetcskreqskqueuedrop. The captured reqskput in inetcskreqskqueuedrop is called only when it successfully removes req...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.12 contains security vulnerabilities. These vulnerabilities stem from a lack of preemptive protection between the modtimer and refcountset functions in the reqskqueuehashreq function. This may lead to abnormal reference counting, which in turn can cause reclamation afte...