https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 18:15:41 +0000 https://vulnerability.circl.lu/vuln/cve-2026-63919 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>xfrm: input: hold netns during deferred transport reinjection</p> <p>Transport-mode reinjection stores a struct net pointer in skb-&gt;cb and uses it later from xfrm_trans_reinject(). That pointer must stay valid until the deferred callback runs.</p> <p>Take a netns reference when queueing deferred reinjection work and drop it after the callback completes. Use maybe_get_net() so the queueing path does not revive a namespace that is already being torn down.</p> <p>This keeps the existing workqueue design and fixes the netns lifetime handling in one place for all users of xfrm_trans_queue_net().</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>xfrm: input: hold netns during deferred transport reinjection</p> <p>Transport-mode reinjection stores a struct net pointer in skb-&gt;cb and uses it later from xfrm_trans_reinject(). That pointer must stay valid until the deferred callback runs.</p> <p>Take a netns reference when queueing deferred reinjection work and drop it after the callback completes. Use maybe_get_net() so the queueing path does not revive a namespace that is already being torn down.</p> <p>This keeps the existing workqueue design and fixes the netns lifetime handling in one place for all users of xfrm_trans_queue_net().</p> https://vulnerability.circl.lu/vuln/cve-2026-63919