CVE-2026-89564

CVE-2026-89564 affects the Linux kernel 's IPv4 and IPv6 input paths. When a multicast packet is not locally deliverable, the original skb retains a stale skb->sk pointer installed by bpf_sk_assign() or UDP early demux , where no socket reference is guaranteed. After the prefetched socket is d...

EUVD-2026-76475

In the Linux kernel, the following vulnerability has been resolved: ip: orphan prefetched skbs before multicast forwarding IPv4 and IPv6 input preserve an skb-sk association installed by bpfskassign so that local delivery can use the selected socket under RCU. Both address families can also...