CVE-2026-72451

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the xfrm input state cache insertion code. The system verifies the state validity before acquiring the global xfrm state lock, allowing a state to be terminated after the check but before insertion, which results in a dead state being added to the cache. This issue occurs within the xfrm input() function on the input path where Bottom Halves (BH)—software interrupts that handle deferred work—must be disabled.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.