CVE-2026-63911

kernel: xfrm: iptfs: reset runtime state when cloning SAs

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 19, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's xfrm: iptfs component. This vulnerability arises from incorrect handling of runtime data when cloning Security Associations (SAs). If a state migration fails, the cloned state can improperly share memory with the original, leading to use-after-free and double-free conditions. This memory corruption could allow an attacker to cause system instability or potentially execute arbitrary code.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-1341 · Multiple Releases of Same Resource or Handle