BELL-CVE-2026-23192

Bulletin has no description...

CVE-2026-23192

A use-after-free vulnerability was found in the Linux kernel's linkwatch subsystem. When a network device is deleted while linkwatch events are pending, the device reference can be dropped prematurely in linkwatchdodev, allowing netdevruntodo to free the device while linkwatchrunqueue still needs...

DEBIAN-CVE-2026-23192

In the Linux kernel, the following vulnerability has been resolved: linkwatch: use devput in callers to prevent UAF After linkwatchdodev calls devput to release the linkwatch reference, the device refcount may drop to 1. At this point, netdevruntodo can proceed since linkwatchsyncdev sees an empt...