CVE-2026-64579

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the xfrm policy component where the xfrm hash rebuild() function fails to correctly preallocate bins and chains for inexact policies. Due to an inverted guard, the function skips preallocation for policies where prefixlen is less than the threshold, forcing the reinsert process to use the xfrm policy inexact insert() path, which performs a GFP ATOMIC allocation. Under memory pressure, if this allocation fails, the system continues with a poisoned node. Subsequent rebuild attempts that call hlist del rcu() then dereference this poisoned node, leading to a general protection fault (GPF) and a kernel panic.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.