CVE-2026-46102

In the Linux kernel, the following vulnerability has been resolved:

net: strparser: fix skbhead leak in strpabort_strp()

When the stream parser is aborted, for example after a message assembly timeout, it can still hold a reference to a partially assembled message in strp->skb_head.

That skb is not released in strpabortstrp(), which leaks the partially assembled message and can be triggered repeatedly to exhaust memory.

Fix this by freeing strp->skbhead and resetting the parser state in the abort path. Leave strpstop() unchanged so final cleanup still happens in strp_done() after the work and timer have been synchronized.