CVE-2026-43090

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak exists in the Linux kernel due to a reference count imbalance. The issue occurs within the xfrm migrate policy find() function, which performs a double call to the xfrm pol hold rcu() function. Because the lookup function already returns a policy with a held reference, the second call is redundant, leading to a leak in xfrm policy alloc().

Recommendations Remove the redundant xfrm pol hold rcu() call within the xfrm migrate policy find() function.