Vulnerability in Linux

CVE-2026-64581

In the Linux kernel, the following vulnerability has been resolved: xfrm: fix sk_dst_cache double-free in xfrm_user_policy() xfrm_user_policy() clears the socket dst cache with __sk_dst_reset(), i.e. the non-atomic __sk_dst_set(sk, NULL)…

Affected products

  • Linux — versions 2b06cdf3e688b98fcc9945873b5d42792bd4eee0, 72f157be2f81910ae759bfe2e5c2256fc4625645, 9e9fe58a92a46c6d154d2901735bf230d91b8507

References