CVE-2026-43167
MediumSummary
A vulnerability has been identified in the Linux kernel related to improper reference counting management in the 'xfrm_state' structure. The issue occurs during the NETDEV_UNREGISTER event, leading to reference count leaks.
Risk Assessment
Reference count leaks may lead to unexpected system behavior, and in extreme cases, could cause crashes or destabilization of network services.
Recommendation
It is recommended to update the Linux kernel to the latest version where this vulnerability has been patched to minimize the risks associated with memory leaks.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: xfrm: always flush state and policy upon NETDEV_UNREGISTER event syzbot is reporting that "struct xfrm_state" refcount is leaking. unregister_netdevice: waiting for netdevsim0 to become free. Usage count = 2 ref_tracker: netd