CVE-2026-53239

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the xfrm policy component. A race condition occurs in the xfrm policy bysel ctx() function when xfrm policy lock is dropped before pruning the bin. If another process triggers xfrm hash rebuild() and calls xfrm policy inexact flush(), the bin is freed via kfree rcu(bin). Subsequently, when the original process calls xfrm policy inexact prune bin(bin), it accesses memory that has already been released.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.