IPsec Acquired Session Authentication Vulnerability in Linux Kernel

CVE-2026-64522

What is CVE-2026-64522?

A vulnerability in the Linux kernel's handling of IPsec acquired session authentication can lead to improper state management during the allocation of software states. Specifically, when mlx5e_xfrm_add_state() deals with acquire-flow temporary Security Associations (SAs), it fails to properly manage the eswitch mode block, resulting in a decrement of the block mode count without matching increments. This manipulation in the flow can create potential security risks in handling IPsec connections, necessitating a thorough review of affected systems.

References