CVE-2026-46172

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak occurs in the Linux kernel within the xfrm6 rcv encap() function. When performing an IPv6 route lookup, the ip6 route input lookup() function returns a referenced destination (dst) entry even if the lookup results in an error route. If the dst->error variable is set, the system drops the socket buffer (skb) without attaching the destination entry or releasing the reference. Consequently, repeated packets following this path cause a leak of destination entries.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.