Use-After-Free Vulnerability in Linux Kernel Network Stack

CVE-2026-98370

What is CVE-2026-98370?

A vulnerability in the Linux kernel's handling of xfrm ALLOCSPI requests has been identified, leading to a potential use-after-free condition. This issue arises during the processing of compatibility requests where the xfrm_state_netlink function manages response construction using the dump_one_state method. A redundant call to alloc_compat can lead to unintended memory access, wherein the kernel interpreter misreads payload sizes, thereby exposing free memory areas to malicious processes. This could potentially allow an attacker to exploit the vulnerability during concurrent operations, leading to significant security implications.

References