CVE-2026-43167

CVE-2026-43167 relates to the Linux kernel xfrm subsystem where a reference-count leak in xfrm_state occurs when a network device is unregistered. The issue stems from an IPsec hardware-offload API change (commit d77e38e612a0) that made xfrm_dev_unregister() a no-op, even though xfrm_dev_state_ad...

PT-2026-37507

In the Linux kernel, the following vulnerability has been resolved: xfrm: always flush state and policy upon NETDEV UNREGISTER event syzbot is reporting that "struct xfrm state" refcount is leaking. unregister netdevice: waiting for netdevsim0 to become free. Usage count = 2 ref tracker:...