cve 2026 63979

The cve 2026 63979 tag covers reporting on a critical Linux kernel security vulnerability in the newer TLS handshake infrastructure. The issue involves a lifetime-management race in which a file descriptor reference may be released while an accept-side path is preparing to pass a socket to a user-space handshake agent. Under the vulnerable condition, the race can cause a NULL-pointer dereference or use-after-free involving struct socket and its associated file object. Coverage also notes the kernel.org CVSS 3.1 score of 9.8, classified as Critical, while NVD had not supplied its own assessment in the referenced update.