Memory Allocation Flaw in Linux Kernel xfrm Policy Management

CVE-2026-64579

What is CVE-2026-64579?

A vulnerability in the Linux kernel related to xfrm policy management can lead to memory allocation failures and cause the kernel to panic. The issue arises during the reallocation process where the preallocation of inexact bins is improperly managed. This prevents the system from allocating memory as required, which can result in a general protection fault. Affected systems may experience crashes under memory pressure, triggered by faulty handling within the xfrm_hash_rebuild function, presenting a risk for non-canonical address access and subsequent kernel instability.

References