Libreswan, an IPsec and IKE implementation for Linux, has multiple security vulnerabilities including a Use-After-Free bug in IKEv2 when using IKE-over-TCP (CVE-2026-94453). These issues affect versions prior to 4.15-11.el9_8. The vulnerabilities could impact the secure tunneling capabilities of VPNs relying on Libreswan. A security update fixing these issues is available from Red Hat.