CVE-2026-99116

A flaw was found in the Linux kernel. A local user could trigger a use-after-free vulnerability in the networking subsystem, leading to a Denial of Service (DoS) or potential privilege escalation. When network sockets are cloned, the Packet Security Protocol (PSP) association is copied from the parent socket without properly incrementing its reference counter. As a result, closing the parent and child sockets can leave lingering timers that access previously freed memory, causing the system to crash.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.