CVE-2026-99270

Published 3 November 2026 · tracked since 3 November 2026

Description

In the Linux kernel, the following vulnerability has been resolved: tcp: Fix potential UAF in reqsk_timer_handler(). When TCP socket migration fails at inet_ehash_insert() in reqsk_timer_handler(), we jump to the no_ownership: label and free the new reqsk immediately with __reqsk_free(). Thus, we

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-121443 MEDIUM 5.3
• CVE-2026-121444 HIGH 7.5
• CVE-2026-121435 MEDIUM 4.3
• CVE-2026-121436 HIGH 7.2
• CVE-2026-121417 HIGH 7.8
• CVE-2026-121392 HIGH 7.4
• CVE-2026-118527 MEDIUM 4.3
• CVE-2026-106991 HIGH 7.1
• CVE-2026-119742 HIGH 7.2
• CVE-2026-119179 HIGH 7

→ Open the live CVE board · all tools