Vulnerability in Linux

CVE-2026-46172

In the Linux kernel, the following vulnerability has been resolved: ipv6: xfrm6: release dst on error in xfrm6_rcv_encap() xfrm6_rcv_encap() performs an IPv6 route lookup when the skb does not already have a dst attached. ip6_route_input…

EPSS: 0.000 (9.7th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 7.1-rc3, 7.0.7, 5.8

References