CVE-2026-74695

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the netfilter flowtable offload hooks and XFRM offload path. Incoming socket buffers (skbs) may already possess a ref-counted dst entry from previous routing or RX steps. When the skb dst set noref() function is called while an skb already holds a ref-counted destination, it overwrites skb-> skb refdst. This results in a leak of the previous dst entry reference count and triggers a DEBUG NET WARN ON ONCE assertion within the skb dst check unset() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.