EUVD-2026-93157

In the Linux kernel, the following vulnerability has been resolved: xfrm: save input state data before secpath resets xfrminput stores the current xfrmstate in the skb secpath while it continues receive-side processing. Some input paths can reset that secpath before xfrminput has finished...

CVE-2026-98229

The Linux kernel contains a vulnerability where xfrm_input() can dereference a freed state. The issue occurs because some input paths, such as VTI and XFRM interfaces , can reset the secpath before xfrm_input() finishes processing. Specifically, if secpath_reset() drops the last state reference w...