CVE-2026-31533

A flaw was found in the Linux kernel's net/tls component. Incorrect error handling in the tls_do_encryption() function, specifically when a cryptographic request returns an error, leads to a double cleanup of internal data structures. This can result in a use-after-free vulnerability, where memory is accessed after it has been deallocated. An attacker could potentially leverage this flaw to cause a denial of service or achieve arbitrary code execution.

Upstream corrected the kTLS encryption error path so -EBUSY handling cannot double-put TLS context state. Red Hat treats this as a local kernel networking/crypto stability issue until product-specific exploitability work completes. Apply patched kernels when released.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the tls module from being loaded. See https://access.redhat.com/solutions/41278 for instructions.