CVE-2026-43091

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the xfrm component where the xfrm policy fini() function frees the policy bydst hash tables after flushing policy work items and deleting policies without waiting for concurrent RCU (Read-Copy-Update) readers to exit their read-side critical sections. Because the policy bydst tables are published via rcu assign pointer() and accessed through rcu dereference check(), the network namespace teardown must wait for an RCU grace period before the table memory is freed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.