CVE-2026-31471
kernel: xfrm: iptfs: only publish mode_data after clone setup
Loading…
Severity
LowRed Hat Product Security
CVSS
Review impact separately from score.
Published · April 22, 2026
Updated · October 20, 2026
Description
A flaw was found in the Linux kernel, specifically within the xfrm: iptfs component. This vulnerability arises during the cloning of network security states, where an error in memory allocation can lead to the system attempting to use or free memory that has already been released. This memory corruption could allow an attacker to cause a denial of service, potentially leading to system instability or unresponsiveness.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-1341 · Multiple Releases of Same Resource or Handle