CVE-2026-92489

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A double-free issue exists in the xfrm dev direct output() function. When the local out() function returns a value other than 1, it indicates that the socket buffer (skb) has been consumed or its ownership has been transferred. However, xfrm dev direct output() continues to free the skb in this scenario, which leads to a double-free condition if netfilter drops the packet, potentially invalidating other owners of the buffer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.