Use-After-Free Vulnerability in Linux Kernel TCP Handling

CVE-2026-74714

What is CVE-2026-74714?

A use-after-free vulnerability has been identified in the Linux Kernel's TCP handling. During the processing of TCP connections, the kernel's handling of request sockets can lead to dangerous conditions when refcounting assumptions are violated. Specifically, the vulnerability arises when a TCP_NEW_SYN_RECV request sock is published onto the ehash chain while holding the bucket lock, leading to inconsistencies in reference counting. This flaw can be exploited, resulting in potential memory corruption or unpredictable behavior when the socket's reference count becomes negative due to improper handling. A critical fix has been introduced to ensure that reference counts are correctly managed during concurrent access, thereby mitigating the risk of exploitation and enhancing overall kernel security.

References