PT-2026-37401 · Linux · Linux Kernel

Published 2026-05-06 · Updated 2026-06-12 · CVE-2026-43091

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the xfrm component where the xfrm policy fini() function frees the policy bydst hash tables after flushing policy work items and deleting policies without waiting for concurrent RCU (Read-Copy-Update) readers to exit their read-side critical sections. Because the policy bydst tables are published via rcu assign pointer() and accessed through rcu dereference check(), the network namespace teardown must wait for an RCU grace period before the table memory is freed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-43091

OESA-2026-2674

Affected Products

Linux Kernel

References · 90

• https://cve.org/CVERecord?id=CVE-2026-43091 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-45983 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-43452 · Security Note
• https://git.kernel.org/stable/c/438b1f668ad58f46ce699bb48e4698a7839e3f9e · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-31616 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-46172 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-46132 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-43077 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-45944 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-68330 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-43130 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-46043 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-43453 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-45894 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31700 · Security Note