CVE-2026-80845

A flaw was found in the Linux kernel's xfrm IPSec framework component. A lock inversion vulnerability exists within the natkeepalivework function. This flaw can lead to an AB-BA deadlock when a Network Address Translation NAT keepalive worker races with Security Association SA deletion. The...

CVE-2026-80845: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: xfrm: avoid lock inversion in nat keepalive work natkeepalivework walks the state table while xfrmstatewalk holds net-xfrm.xfrmstatelock. Its callback then acquires x-lock, which conflicts with the delete path taking the same loc...

CVE-2026-31406: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix work re-schedule after cancel in xfrmnatkeepalivenetfini After canceldelayedworksync is called from xfrmnatkeepalivenetfini, xfrmstatefini flushes remaining states via xfrmstatedelete, which calls...