CVE-2026-53184

The CVE describes a Linux kernel bug on the UDP receive path when a socket is in a sockmap. skb->dev is repurposed as dev_scratch and is not cleared before running the attached SK_SKB verdict program; if the verdict calls socket-lookup helpers (bpf_sk_lookup_tcp/udp, bpf_skc_lookup_tcp), skb-&...

EUVD-2026-39275

In the Linux kernel, the following vulnerability has been resolved: udp: clear skb-dev before running a sockmap verdict On the UDP receive path skb-dev is repurposed as devscratch the truesize/state cache set by udpsetdevscratch, through the union struct netdevice dev; unsigned long devscratch; i...