CVE-2026-93105

A flaw was found in the Linux kernel. Specifically, a component responsible for handling network packet fragments (esp_ssg_unref()) incorrectly manages memory page references. This error can cause the system to release a memory page that is still actively in use. Such an issue can lead to memory corruption, potentially resulting in system instability or a denial of service.

Red Hat has evaluated this vulnerability as having a Moderate impact because exploitation requires local unprivileged access combined with specific asynchronous zero-copy operations over an active IPsec ESP connection. Standard Red Hat Enterprise Linux configurations do not automatically invoke IPsec transformation pipelines for unprivileged user network traffic, significantly limiting general exposure. While an authenticated local attacker could trigger a reference counting inconsistency leading to memory corruption and potential system instability, successful exploitation depends on strict architectural prerequisites rather than basic network activity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.