THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-63978 (CRITICAL 9.8) — In the Linux kernel, the following vulnerability has been resolved: net/handshake: Drain pending requests at net namespace exit The arguments to list_splice_init() in handshake_net_exit() are reversed. The call moves the local empty "requests" list onto hn->hn_requests, leaving

[NVD] CVE-2026-63978 (CRITICAL 9.8) — In the Linux kernel, the following vulnerability has been resolved: net/handshake: Drain pending requests at net namespace exit The arguments to list_splice_init() in handshake_net_exit() are reversed. The call moves the local empty "requests" list onto hn->hn_requests, leaving

mednvdPublished 2026-07-19

CVE-2026-63978 CVSS: 9.8 CRITICAL Published: 2026-07-19T16:17:16.957

In the Linux kernel, the following vulnerability has been resolved:

net/handshake: Drain pending requests at net namespace exit

The arguments to list_splice_init() in handshake_net_exit() are reversed. The call moves the local empty "requests" list onto hn->hn_requests, leaving the local list empty, so the subsequent drain loo

Indicators of compromise

CVE-2026-63978cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-63978