Linux Kernel Vulnerability in xfrm Module Introduces RCU Lock Issues

CVE-2026-98369

What is CVE-2026-98369?

A vulnerability in the Linux kernel's xfrm module has led to improper handling of RCU locks, resulting in warnings during the processing of network packets. This situation is triggered when the xfrm_trans_reinject function was transitioned from tasklet to workqueue, which eradicated the previous RCU context, leading to failures in maintaining necessary locks. Consequently, this introduced risks associated with processing packets that do not retain valid device references, potentially resulting in unexpected behavior and system instability. The issue has been addressed through implementing necessary RCU locking mechanisms and ensuring proper reference counting for packet destinations within the workqueue context.

References