PT-2026-61117 · Linux · Linux Kernel
CVE-2026-63801
·
Published
2026-07-19
·
Updated
2026-07-20
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A slab-use-after-free read exists in the TIPC AEAD decrypt function. The
tipc aead decrypt() function fails to take a reference on the network namespace (netns) before calling crypto aead decrypt(). When decryption is offloaded asynchronously, the tipc aead decrypt done() function may execute after the bearer's netns has been torn down and the per-netns tipc crypto has been freed. This leads to the dereferencing of freed memory when accessing aead->crypto->stats, aead->crypto->net, and the node table within tipc crypto rcv complete(). A slab-use-after-free is a condition where the system attempts to access memory that has already been marked as free by the slab allocator.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel