CVE-2026-93105

This Linux kernel vulnerability affects the IPsec ESP subsystem, specifically the esp_ssg_unref() function. The function unconditionally drops page references on skb frag pages after an AEAD transform, but fails to account for managed frags (SKBFL_MANAGED_FRAG_REFS)—pages owned by a zerocopy ubuf...

CVE-2026-93105 esp: do not unref managed frag pages in esp_ssg_unref()

In the Linux kernel, the following vulnerability has been resolved: esp: do not unref managed frag pages in espssgunref espssgunref releases the page references held on the source scatterlist after the AEAD operation completes. It calls skbpageunref on every frag page for an out-of-place transfor...