Use-After-Free Vulnerability in Linux Kernel TCP-AO Implementation

CVE-2026-80850

What is CVE-2026-80850?

A vulnerability in the TCP-AO implementation of the Linux kernel could lead to use-after-free scenarios. When TCP-AO is configured, the validation of keys associated with connected sockets does not properly manage the socket's attachment to the Virtual Routing and Forwarding (VRF) domain. This oversight allows a condition where, during a connection's establishment and VRF detachment race, an old pointer can be accessed after it has been freed. As a result, this can lead to instability and potential exploitation within the network stack, especially under high-load scenarios. The issue has been corrected to ensure consistent handling of socket memory after the validation process, preventing access to freed objects.

References