CVE-2026-46172

MEDIUM EPSS 2.8%
Published May 28, 20261mo ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published May 28, 2026 1mo ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: ipv6: xfrm6: release dst on error in xfrm6_rcv_encap() xfrm6_rcv_encap() performs an IPv6 route lookup when the skb does not already have a dst attached. ip6_route_input_lookup() returns a referenced dst entry even when the lookup resolves to an error route. If dst->error is set, xfrm6_rcv_encap() drops the skb without attaching the dst to the skb and without releasing the reference returned by the lookup. Repeated packets hitting this path therefore leak dst entries. Release the dst before jumping to the drop path.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
2.8% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Affected Products 9

VendorProductVersionRange
linuxlinux_kernel*≥5.8  –  <5.10.258
linuxlinux_kernel*≥5.11  –  <5.15.209
linuxlinux_kernel*≥5.16  –  <6.1.175
linuxlinux_kernel*≥6.2  –  <6.6.140
linuxlinux_kernel*≥6.7  –  <6.12.88
linuxlinux_kernel*≥6.13  –  <6.18.30
linuxlinux_kernel*≥6.19  –  <7.0.7
linuxlinux_kernel7.1any
linuxlinux_kernel7.1any

References 8

  • git.kernel.org https://git.kernel.org/stable/c/554c9b090c8ac5b1c5c507f4badf8d5d0c9c6e13
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/6a5eec0a2a0e99ec9743cf8f1c4082178811d90a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/870560015ce6e0d8f841c6a8aba33c44be52c727
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/9d5047782f9bd2829e529df69209bf3232eb561f
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/a0721bcd72641c32b281f227a94505b31cf54117
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/a20b34f6e854fe6f2aa82528fae7a88759919eb4
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/bc0fcb9823cd0894934cf968b525c575833d7078
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/c2efc4956981066df2fef1cc77391b523db6d8e4
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/554c9b090c8ac5b1c5c507f4badf8d5d0c9c6e13
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/6a5eec0a2a0e99ec9743cf8f1c4082178811d90a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/870560015ce6e0d8f841c6a8aba33c44be52c727
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/9d5047782f9bd2829e529df69209bf3232eb561f
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/a0721bcd72641c32b281f227a94505b31cf54117
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/a20b34f6e854fe6f2aa82528fae7a88759919eb4
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/bc0fcb9823cd0894934cf968b525c575833d7078
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/c2efc4956981066df2fef1cc77391b523db6d8e4
    Patch