Vulnerability in Linux

CVE-2026-68420

In the Linux kernel, the following vulnerability has been resolved: xfrm: reject optional IPTFS templates in outbound policies syzbot reported a stack-out-of-bounds read in xfrm_state_find() which flows from xfrm_tmpl_resolve_one(). Com…

Affected products

  • Linux — versions d1716d5a44c37e5743bf6ea4e5cdbdab37727f27, 6.14, 0

References