CVE-2026-98369 xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject()

In the Linux kernel, the following vulnerability has been resolved: xfrm: add missing rcureadlock, skbdstforce and devhold for xfrmtransreinject syzbot reported a suspicious RCU usage warning in ip6pktdrop: WARNING: suspicious RCU usage in ip6pktdrop include/net/addrconf.h:389 suspicious...

CVE-2026-98369

The Linux kernel is affected by a vulnerability in the xfrm subsystem where xfrm_trans_reinject was converted from a tasklet to a workqueue. Because workqueue workers run in process context, they fail to enter an RCU read-side critical section, causing RCU lockdep warnings when invoking finish ca...