Use-After-Free Vulnerability in Linux Kernel Network Device Management

CVE-2026-98364

What is CVE-2026-98364?

A vulnerability in the Linux kernel arises from improper handling of network device references during bundle creation. Specifically, the functions xfrm_bundle_create() and xfrm_create_dummy_bundle() do not take a device reference when accessed, resulting in potential use-after-free conditions. When a concurrent RTM_DELLINK modifies dst->dev and frees the previous net_device, any subsequent references can lead to system crashes or exploits. The issue is primarily located within the xfrm6_fill_dst() function, where a stale device pointer may be dereferenced. The vulnerability has been addressed by adjusting the reference management process to ensure that the necessary device references are maintained through the respective critical section.

References