Linux Kernel Vulnerability in IPsec Resource Management by Mellanox Technologies

CVE-2026-43467

What is CVE-2026-43467?

A vulnerability has been identified in the Linux kernel related to resource management when transitioning to switchdev mode in devices lacking IPsec support. An incorrect cleanup call for IPsec resources, even when not supported, results in system crashes. This vulnerability emphasizes the importance of proper support checks before performing cleanup operations in kernel modules to avoid critical failures. Developers are advised to ensure their code correctly handles IPsec support verification to prevent similar issues.

References