← WebKit Silent-Fix Report — 2026-W23
67117c4975bb291a8775a61ee3c19dfe13e50690 MessagePorts a WebContent process already has should be invalidated if the Networking process disconnects
severity medium
class UAF
confidence 0.55
WebCore MessagePort
Primitive: MessagePorts not invalidated when Networking process disconnects
Triage note: MessagePorts already held by a WebContent process stayed entangled after the Networking process disconnected; fix adds MessagePort::notifyAllConnectionsClosed to detach ports and tracks m_portsKnownToNetworkProcess, avoiding use of stale/dangling channels after network-process teardown.
Triage note: MessagePorts already held by a WebContent process stayed entangled after the Networking process disconnected; fix adds MessagePort::notifyAllConnectionsClosed to detach ports and tracks m_portsKnownToNetworkProcess, avoiding use of stale/dangling channels after network-process teardown.
Security-relevant, below the exploitable-grade bar for a full root-cause writeup. The triage verdict is above; the side-by-side patch is below.
Before / after
Loading diff…