Linux TCP AO Function Use-After-Free

The vulnerability of the tcpaodeletekey function in the net/ipv4/tcpao.c module, part of the IPv4 protocol implementation in Linux kernel, relates to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to compromise the...

CVE-2026-53389: Use After Free

In the Linux kernel, the following vulnerability has been resolved: net/tcp-ao: fix use-after-free of key in delasync path In tcpaodeletekey, the delasync path skips the currentkey and rnextkey validity checks present in the synchronous path, assuming these pointers are always NULL on LISTEN...