CVE-2026-64581

CVE-2026-64581: Linux kernel XFRM double-free in xfrm_user_policy() due to non-atomic sk_dst_cache updates. A per-socket policy change can race with UDP transmit path, causing both sides to release the same dst and freeing the xfrm_dst bundle twice. The fix uses an atomic sk_dst_reset() with a si...