TCP/IP Communication Vulnerability in Linux Kernel Affecting TIPC

CVE-2026-63801

What is CVE-2026-63801?

A vulnerability has been identified in the Linux Kernel stemming from improper handling of network namespace references during the decryption process in the TIPC (Transparent Inter-Process Communication) module. Specifically, the tipc_aead_decrypt() function does not acquire a reference on the network namespace before proceeding with decryption. This oversight can lead to a slab-use-after-free condition when the network namespace is destroyed while a decryption operation is in progress. As the decryption completes asynchronously, it may try to access freed memory, resulting in potential memory corruption and instability of the system. The fix mirrors a previous correction made to the encryption pathway, ensuring that network references are correctly maintained throughout the decryption process.

References