Memory Management Issues in Linux Kernel TCP Socket Migration

CVE-2026-99270

What is CVE-2026-99270?

A vulnerability in the Linux kernel involves a potential use-after-free (UAF) issue during TCP socket migration. Specifically, if the migration fails at the inet_ehash_insert function within reqsk_timer_handler, the system improperly frees the new request socket (reqsk) without adequately stopping its timer. This oversight could lead to memory corruption, posing a risk to system stability. To mitigate this issue, the fix ensures that the timer for the new reqsk is appropriately stopped before it is freed, thereby enhancing memory management in TCP socket operations.

References