CVE-2026-64518

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> tcp: Fix out-of-bounds access for twsk in tcp_ao_established_key().<br /> <br /> lockdep_sock_is_held() was added in tcp_ao_established_key()<br /> by the cited commit.<br /> <br /> It can be called from tcp_v[46]_timewait_ack() with twsk.<br /> <br /> Since it does not have sk-&gt;sk_lock, the lockdep annotation<br /> results in out-of-bound access.<br /> <br /> $ pahole -C tcp_timewait_sock vmlinux | grep size<br /> /* size: 288, cachelines: 5, members: 8 */<br /> $ pahole -C sock vmlinux | grep sk_lock<br /> socket_lock_t sk_lock; /* 440 192 */<br /> <br /> Let&amp;#39;s not use lockdep_sock_is_held() for TCP_TIME_WAIT.