CVE-2026-68426

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the xfrm component. When validate xmit xfrm() processes a GSO (Generic Segmentation Offload) list and segments are handled by async crypto, those segments are unlinked from the list. However, the skb->prev pointer at the list head is not updated. If the last segment is stolen by the crypto engine and subsequently freed, validate xmit skb list() attempts to write through the stale skb->prev pointer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.