Use-After-Free Vulnerability in Linux Kernel Affects Networking Components

CVE-2026-64554

What is CVE-2026-64554?

In the Linux kernel, a vulnerability exists within the netfilter networking component, specifically in the br_ip6_fragment() function. Following the invocation of skb_checksum_help(), a pointer named prevhdr may get dereferenced after being left dangling due to memory reallocation. This situation can lead to a use-after-free condition, which triggers a kernel panic and poses security risks during packet processing. Addressing this vulnerability ensures the integrity and stability of network operations.

References