Linux Kernel Security Flaw Affects Network Handshake Mechanism

CVE-2026-63978

What is CVE-2026-63978?

A security flaw in the Linux kernel concerning network handshake mechanisms has been identified. During the exit process of net namespaces, the implementation incorrectly reverses the arguments in the list_splice_init() function. This oversight leads to an empty local 'requests' list being improperly moved, leaving pending handshake requests without proper teardown when the namespace is destroyed. The flaw may result in a list corruption race condition during concurrent operations, potentially causing instability and security risks. The necessary corrections include ensuring proper argument order in handling the requests and implementing safeguards against concurrent access during the draining process. These steps will help maintain the integrity and reliability of network operations within the Linux kernel.

References