CVE-2026-74268

This CVE describes a Linux kernel vulnerability where a child socket can inherit BPF sock_ops cb flags from the listener through sk_clone_lock(), leading to a crash or compromised handling if its setup fails in tcp_v4_syn_recv_sock() or tcp_v6_syn_recv_sock(). The root cause is that, on forced-cl...

CVE-2026-74268: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tcp: clear sockops cb flags before force-closing a child socket A child socket inherits the listener's bpfsockopscbflags via skclonelock. If its setup fails in tcpv4synrecvsock / tcpv6synrecvsock, the child is freed through...