CVE-2026-98374 | Linux Kernel up to 7.3-rc4 TCP SYN net/ipv4/tcp_input.c tcp_send_synack retransmit_skb_hint use after free

October 7, 2026 Yanac

A vulnerability classified as very critical has been found in Linux Kernel up to 7.3-rc4. Affected by this issue is the function tcp_send_synack of the file net/ipv4/tcp_input.c of the component TCP SYN Handler. Performing a manipulation of the argument retransmit_skb_hint results in use after free.

This vulnerability is reported as CVE-2026-98374. The attack is possible to be carried out remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More