Use-After-Free Vulnerability in Linux Kernel Network Packet Handling

CVE-2026-74569

What is CVE-2026-74569?

A vulnerability in the Linux kernel's netfilter component could lead to a use-after-free scenario when processing NAT-rewritten SIP messages. The issue occurs within the sip_help_tcp() function, where a potential overflow in the size change of SIP messages may lead to incorrect memory handling. This results in erroneous reads from freed memory and poses a risk for memory corruption. Developers are advised to widen the storage types used for message size changes to prevent the issue, ensuring robust handling of larger messages without the risk of reading past allocated memory.

References