CVE-2026-43167

A flaw was found in the Linux kernel's xfrm subsystem, which handles IPsec (Internet Protocol Security) transformations. This vulnerability is caused by a reference count leak in xfrm_state objects when a network device is unregistered. An attacker with local access and privileges to configure network devices could exploit this by repeatedly adding and removing IPsec states, leading to resource exhaustion and a potential denial of service (DoS) on the system.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.