Socket Vulnerability in Linux Kernel Affecting Network Functionality

CVE-2026-64523

What is CVE-2026-64523?

The vulnerability identified in the Linux kernel relates to the network handshake process, where improper handling of file references could lead to a security risk. Specifically, the function 'handshake_nl_accept_doit()' fails to hold onto the necessary file pointer during transition phases, potentially allowing unanticipated socket teardown. To address this issue, modifications have been made to incorporate an explicit file reference within the handshake request structure, ensuring that both submission and error handling paths maintain appropriate file reference counts, thus improving overall network functionality and security. Further retargeting of accept-side dereferences will be addressed in subsequent patches.

References