Memory Reuse Vulnerability in Linux Kernel TCP Established Lookups

CVE-2026-99288

What is CVE-2026-99288?

A vulnerability in the Linux kernel related to TCP established lookups can lead to kernel crashes due to memory reuse issues. Specifically, the vulnerability involves unhashed sockets leading to a NULL pointer dereference upon certain lookup operations. When an address is reused for a socket with the same tuple, established lookup functions may acquire references to these unhashed sockets, resulting in a crash under specific conditions. This vulnerability emphasizes the need for proper reference checks during the socket lookup process to prevent potential kernel panics, ensuring system stability and security.

References