Kernel Vulnerability in Linux Affecting XFRM Interface Management

CVE-2026-43107

What is CVE-2026-43107?

A vulnerability in the Linux kernel affects the XFRM interface management by failing to account for the XFRMA_IF_ID attribute during the size calculation for message replies. This oversight can lead to the build_aevent function appending an insufficient size of attributes, resulting in error -EMSGSIZE and triggering a kernel panic through normal error handling paths. Properly accounting for XFRMA_IF_ID in size calculations will mitigate the issue and enhance system stability during netlink interactions.

References