Vulnerability in Linux

CVE-2026-68377

In the Linux kernel, the following vulnerability has been resolved: net/sched: act_tunnel_key: Defer dst_release to RCU callback Fix a race-condition use-after-free in tunnel_key_release_params(). The function releases the metadata_dst…

Affected products

  • Linux — versions 9174c3df1cd181c14913138d50ccbe539bb08335, 02239e797ac75f89a05622a27d04695f08c1ca89, ca9b7a65a2c97579fcdd509d454d48e3a5c49af8

References