CVE-2026-43139

A flaw was found in the Linux kernel's xfrm6 subsystem. This vulnerability occurs because the xfrm6_get_saddr() function does not properly check the return value of ipv6_dev_get_saddr(). This oversight can result in an uninitialized source address being used, potentially leading to system instability or a denial of service due to a kernel memory error.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.