Security: Linux Kernel: KTLS + sockmap

[NetGuru]

Linux Kernel: KTLS + sockmap “Reverse Order” Use-After-Free / Data Corruption Issue Discussed Publicly

A new Linux kernel security issue related to KTLS and sockmap handling has recently been publicly discussed on the oss-security mailing list.

The issue is described as a possible:

• Use-After-Free condition
• Kernel memory corruption
• Potential privilege escalation vector
• Possible kernel crash or denial-of-service issue

According to the public disclosure, the problem affects interactions between:

Code: Select all

KTLS (Kernel TLS)
sockmap / eBPF networking features

The discussion started after security researcher V3rdant reported the issue to linux-distros and the Linux kernel security team earlier in March 2026.

A proposed fix was later discussed on the Linux netdev mailing list but was reportedly rejected, and afterwards the issue appears to have received little follow-up until it was publicly disclosed by Solar Designer on oss-security.

One important point raised in the discus…login to view the rest of this post