CVE-2026-63914

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Linux kernel where the xfrm send migrate() function in net/xfrm/xfrm user.c and the pfkey send migrate() function in net/key/af key.c hardcode the &init net for multicast notifications announcing successful XFRM MSG MIGRATE or SADB X MIGRATE. This causes notifications to be delivered to listeners on the init net network namespace instead of the issuing network namespace. Consequently, an IKE daemon in init net may receive notifications from other namespaces, while an IKE daemon in a non-init network namespace will not receive notifications of its own migration, breaking IKEv2 MOBIKE and address-update handling.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.