CVE-2026-63919

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the xfrm input component where the network namespace (netns) is not properly held during deferred transport reinjection. The process stores a struct net pointer in skb->cb, which is later accessed by the xfrm trans reinject() function. If the network namespace is not referenced during the queueing of deferred reinjection work, the pointer may become invalid before the callback executes, leading to potential memory safety issues. This is addressed by using maybe get net() to ensure the namespace remains valid without reviving one that is already being torn down.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.