Threats tagged 'ghsa-jrph-46wx-r2g3'

CVE-2026-43091 is a high-severity vulnerability in the Linux kernel's xfrm subsystem related to improper synchronization during network namespace (netns) exit. The flaw involves freeing policy hash tables without waiting for concurrent RCU readers to complete, potentially leading to use-after-free conditions. This can cause confidentiality, integrity, and availability impacts. The issue is fixed by adding an RCU grace period wait before freeing the tables.