Get a Demo

Let's Patch It!

Book a short call with one our specialists, we'll walk you through how Endor Patches work, and ask you a few questions about your environment (like your primary programming languages and repository management). We'll also send you an email right after you fill out the form, feel free to reply with any questions you have in advance!

CVE

CVE-2026-68144

phonet: pep: fix use-after-free in pep_get_sb()
Back to all
CVE

CVE-2026-68144

phonet: pep: fix use-after-free in pep_get_sb()

In the Linux kernel, the following vulnerability has been resolved:

phonet: pep: fix use-after-free in pepgetsb()

pepgetsb() doesn't consider that pskbmaypull() might have relocated

the skb data, and continue to access the older pointer, causing UAF.

Reproduced under KASAN:

  BUG: KASAN: slab-use-after-free in pepgetsb+0x234/0x3b0

  Read of size 1 at addr ff11000105510f50 by task repro/157

   pepgetsb+0x234/0x3b0

   pipehandlerdo_rcv+0x5f7/0xa10

   pepdorcv+0x203/0x410

   _skreceive_skb+0x471/0x4a0

   phonet_rcv+0x5b3/0x6c0

   _netifreceive_skb+0xcc/0x1d0

Refetch the header with skbheaderpointer() after pskbmaypull(), so

the possibly stale pointer is no longer dereferenced. There are better

ways to solve this, but, this is the less instrusive one.

Package Versions Affected

Package Version
patch Availability
No items found.

Automatically patch vulnerabilities without upgrading

Fix Without Upgrading
Detect compatible fix
Apply safe remediation
Fix with a single pull request

CVSS Version

Severity
Base Score
CVSS Version
Score Vector
C
H
U
9.8
-
3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
C
H
U
0
-
3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
C
H
U
-

Related Resources

No items found.

References

https://git.kernel.org/stable/c/0f71f852a96af9685858ce59fda34ecbf85c283d, https://git.kernel.org/stable/c/17f78c0c0d41d738ee236eb6e841e39395188054, https://git.kernel.org/stable/c/1d81e19fc57a5ee55b4497d01bc0510d76fb9578, https://git.kernel.org/stable/c/25e3641beb51333bfbb155af2fd2573a61113af2, https://git.kernel.org/stable/c/8d931a75a38b9bb584a4071f5ebbd52755fc35ee, https://git.kernel.org/stable/c/a48a889b60f73edb0399a8b08284a2ab0bd0295f, https://git.kernel.org/stable/c/c4a52cb4da8d57d060b1d52085d25147a238dac2, https://git.kernel.org/stable/c/df198743859fefba2f824115f8151dd62d7ad6d8, https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68144.json, https://nvd.nist.gov/vuln/detail/CVE-2026-68144, https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Severity

9.8

CVSS Score
0
10

Basic Information

Base CVSS
9.8
EPSS Probability
0.00543%
EPSS Percentile
0.43293%
Introduced Version
9641458d3ec42def729fde64669abf07f3220cd5,2.6.28,5.11.0,5.16.0,6.2.0,6.7.0,6.13.0,6.19.0,0
Fix Available
0f71f852a96af9685858ce59fda34ecbf85c283d,5.10.265,5.15.216,6.1.183,6.6.148,6.12.101,6.18.42,7.1.6,6.12.101-1~deb12u1,6.12.101-1

Fix Critical Vulnerabilities Instantly

Secure your app without upgrading.
Fix Without Upgrading