CVE-2026-64525

A flaw was found in the Linux kernel's xfrm (IPSec framework) component. An issue with improper RCU (Read-Copy-Update) synchronization in the xfrm_policy_fini() function, specifically the serial execution of synchronize_rcu() for each network namespace during cleanup, can lead to a Denial of Service (DoS). Under specific workloads involving frequent network namespace creation and destruction, this can cause system processes to become unresponsive, accumulate cleanup tasks, and consume excessive memory, ultimately leading to Out-Of-Memory (OOM) conditions.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.