CVE-2026-53239

The CVE-2026-53239 entry documents a Linux kernel race in the xfrm policy subsystem leading to a use-after-free of an inexact bin in xfrm_policy_bysel_ctx(). The issue arises when CPU0 handles XFRM_MSG_DELPOLICY and CPU1 handles XFRM_MSG_NEWSPDINFO, with a window where a freed bin is referenced a...

EUVD-2026-39330

In the Linux kernel, the following vulnerability has been resolved: xfrm: policy: fix use-after-free on inexact bin in xfrmpolicybyselctx Fix the race by pruning the bin while still holding xfrmpolicylock, before dropping it. Use xfrmpolicyinexactprunebin directly since the lock is already held...