Buffer Overflow Vulnerability in Linux Kernel Affecting ESP Component

CVE-2026-64009

What is CVE-2026-64009?

A vulnerability exists in the Linux kernel's xfrm_state_mtu function within the ESP component that can lead to a buffer overflow due to an unchecked underflow. An attacker can exploit this weakness by manipulating the MTU and authentication key settings, potentially resulting in a write operation that exceeds the boundary of allocated memory. This could allow for a significant overflow write, which might compromise system stability and security. To mitigate this vulnerability, it is critical to check for underflows and ensure proper error handling in the affected function.

References