Linux Kernel TCP Vulnerability Leading to Socket Reference Errors

CVE-2026-64575

What is CVE-2026-64575?

A vulnerability in the Linux kernel affects the TCP socket management during batch reallocations. Specifically, the function responsible for handling socket references, bpf_iter_tcp_batch(), mismanages the socket references leading to potential kernel panic scenarios. When a realloc operation fails, it erroneously allows dereferencing a cookie rather than a valid socket pointer, resulting in null pointer dereferences and system instability. This vulnerability necessitates immediate attention to prevent service interruptions and maintain system integrity.

References