CVE-2026-46172
Awaiting Analysis Awaiting Analysis - Queue
Linux Kernel IPv6 XFRM dst Reference Leak

Publication date: 2026-05-28

Last updated on: 2026-05-28

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: ipv6: xfrm6: release dst on error in xfrm6_rcv_encap() xfrm6_rcv_encap() performs an IPv6 route lookup when the skb does not already have a dst attached. ip6_route_input_lookup() returns a referenced dst entry even when the lookup resolves to an error route. If dst->error is set, xfrm6_rcv_encap() drops the skb without attaching the dst to the skb and without releasing the reference returned by the lookup. Repeated packets hitting this path therefore leak dst entries. Release the dst before jumping to the drop path.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-05-28
Last Modified
2026-05-28
Generated
2026-05-28
AI Q&A
2026-05-28
EPSS Evaluated
N/A
NVD
CVE-2026-46172
EUVD
EUVD-2026-32799
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

This vulnerability exists in the Linux kernel's IPv6 networking code, specifically in the xfrm6_rcv_encap() function. When this function performs an IPv6 route lookup and encounters an error route, it fails to properly release a referenced destination (dst) entry. Instead of releasing the reference, it drops the packet (skb) without freeing the dst, causing a resource leak.


How can this vulnerability impact me? :

The impact of this vulnerability is a resource leak in the Linux kernel's networking stack. Repeatedly triggering this error path can cause the system to leak dst entries, potentially leading to increased memory usage and degraded system performance or stability over time.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart