7.8

CVE-2026-43091

xfrm: Wait for RCU readers during policy netns exit

In the Linux kernel, the following vulnerability has been resolved:

xfrm: Wait for RCU readers during policy netns exit

xfrm_policy_fini() frees the policy_bydst hash tables after flushing the
policy work items and deleting all policies, but it does not wait for
concurrent RCU readers to leave their read-side critical sections first.

The policy_bydst tables are published via rcu_assign_pointer() and are
looked up through rcu_dereference_check(), so netns teardown must also
wait for an RCU grace period before freeing the table memory.

Fix this by adding synchronize_rcu() before freeing the policy hash tables.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version e1e551bc56302b80ff930c966f9985095fb1b70d
Version < b66920a3348c0f63ba18365248fa21fbf0b3a937
Status affected
Version e1e551bc56302b80ff930c966f9985095fb1b70d
Version < 438b1f668ad58f46ce699bb48e4698a7839e3f9e
Status affected
Version e1e551bc56302b80ff930c966f9985095fb1b70d
Version < 3733fce2871c9bca9dd18a1a23b1432ea215a094
Status affected
Version e1e551bc56302b80ff930c966f9985095fb1b70d
Version < 33a3149dd81a1e2f52b80ee1e0fc380b39f3d028
Status affected
Version e1e551bc56302b80ff930c966f9985095fb1b70d
Version < 069daad4f2ae9c5c108131995529d5f02392c446
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 4.9
Status affected
Version 0
Version < 4.9
Status unaffected
Version <= 6.6.*
Version 6.6.136
Status unaffected
Version <= 6.12.*
Version 6.12.83
Status unaffected
Version <= 6.18.*
Version 6.18.24
Status unaffected
Version <= 6.19.*
Version 6.19.14
Status unaffected
Version <= *
Version 7.0
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.01% 0.024
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.