CVE-2026-68420

The CVE affects the Linux kernel xfrm outbound policy handling. A stack-out-of-bounds read in __xfrm6_addr_hash was triggered via xfrm_state_find and xfrm_tmpl_resolve_one when using IPTFS templates in outbound policies. A prior fix already disallowed optional tunnel/BEET templates in outbound po...