CVE-2026-64543

The CVE-2026-64543 entry documents a Linux kernel use-after-free in TIPC discovery: tipc_disc_rcv dereferences the discoverer after bearer_disable() frees disc with kfree, due to RDMA-like RCU usage and UDP bearer deferral. The fix adds an rcu_head to struct tipc_discoverer and frees the object (...