CVE-2026-80845

CVE-2026-80845 affects the Linux kernel xfrm subsystem, specifically the NAT keepalive worker. The root cause is an AB-BA lock inversion : nat_keepalive_work() acquires x->lock while holding xfrm_state_lock, whereas the SA deletion path (xfrm_state_delete() / __xfrm_state_delete()) takes the s...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: xfrm: Fixed the xfrm state cache insertion race. The code that checks the validity of the input state cache during xfrm operations checks the validity before acquiring the global xfrmstatelock. As a result, it’s possible for...

CVE-2026-72451: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix xfrm state cache insertion race The xfrm input state cache insertion code checks the validity of the state before acquiring the global xfrmstatelock. Thus it's possible for someone else to kill the state after it passed...