Memory Leak Vulnerability in Linux Kernel Affects Multiple Distributions

CVE-2026-43090

What is CVE-2026-43090?

A memory leak has been identified in the Linux kernel involving the xfrm_policy_alloc function. This vulnerability arises from a double call to xfrm_pol_hold_rcu() within the xfrm_migrate_policy_find method, leading to an imbalance in reference counting. The redundant invocation creates an unreferenced object, resulting in memory leaks that could affect system performance and resource allocation. The issue has been resolved in the latest updates, reinforcing the stability and security of the kernel.

References