Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-43167

In the Linux kernel, the following vulnerability has been resolved: xfrm: always flush state and policy upon NETDEV_UNREGISTER event syzbot is reporting that "struct xfrm_state" refcount is leaking. unregister_netdevice: waiting for netdevsim0 to become free. Usage count = 2 ref_tracker: netdev@ffff888052f24618 has 1/1 users at __netdev_tracker_alloc include/linux/netdevice.h:4400 [inline] netdev_tracker_alloc include/linux/netdevice.h:4412 [inline] xfrm_dev_state_add
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:2333d24bdaa86ccc488977add217516c50a7a0fddf4144a54c5a1fd83a5b7efb
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["net/xfrm/xfrm_device.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.12"},{"lessThan":"4.12","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.128","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.75","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.16","versionType":"semver"},{"lessThan…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:cc268fbdbae6f5648f9fa2da9cbf6bb062f824f659efaf80d931a7b25418a5dc · sha256:2a2e76f965d15150… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/xfrm/xfrm_device.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"166801e49a5b5fc127b8c9e2f110f303cfddfbc3","status":"affected","version":"d77e38e612a017480157fe6d2c1422f42cb5b7e3","versionType":"git"},{"lessThan":"a3c8fede034fa27892f87c863cbd5493167d17ed","status":"affected","version":"d77e38e612a017480157fe6d2c1422f42cb5b7e3","versionType":"git"},{"lessThan":"59581778792cbaf8ad788f4a21dc663ce986050e","status":"affected","version":"d77e38e612a017480157fe6…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:cc268fbdbae6f5648f9fa2da9cbf6bb062f824f659efaf80d931a7b25418a5dc · sha256:2a2e76f965d15150… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["net/xfrm/xfrm_device.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.12"},{"lessThan":"4.12","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.128","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.75","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.16","versionType":"semver"},{"lessThan…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:cc268fbdbae6f5648f9fa2da9cbf6bb062f824f659efaf80d931a7b25418a5dc · sha256:2a2e76f965d15150… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/xfrm/xfrm_device.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"166801e49a5b5fc127b8c9e2f110f303cfddfbc3","status":"affected","version":"d77e38e612a017480157fe6d2c1422f42cb5b7e3","versionType":"git"},{"lessThan":"a3c8fede034fa27892f87c863cbd5493167d17ed","status":"affected","version":"d77e38e612a017480157fe6d2c1422f42cb5b7e3","versionType":"git"},{"lessThan":"59581778792cbaf8ad788f4a21dc663ce986050e","status":"affected","version":"d77e38e612a017480157fe6…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:cc268fbdbae6f5648f9fa2da9cbf6bb062f824f659efaf80d931a7b25418a5dc · sha256:2a2e76f965d15150… · /containers/cna/affected/0

Source references

5 source assertions
{"url":"https://git.kernel.org/stable/c/166801e49a5b5fc127b8c9e2f110f303cfddfbc3"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:cc268fbdbae6f5648f9fa2da9cbf6bb062f824f659efaf80d931a7b25418a5dc · sha256:2a2e76f965d15150… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/4efa91a28576054aae0e6dad9cba8fed8293aef8"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:cc268fbdbae6f5648f9fa2da9cbf6bb062f824f659efaf80d931a7b25418a5dc · sha256:2a2e76f965d15150… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/59581778792cbaf8ad788f4a21dc663ce986050e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:cc268fbdbae6f5648f9fa2da9cbf6bb062f824f659efaf80d931a7b25418a5dc · sha256:2a2e76f965d15150… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/8c75c455ecd3bfd2f36abf66edb7021c4fa19ec4"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:cc268fbdbae6f5648f9fa2da9cbf6bb062f824f659efaf80d931a7b25418a5dc · sha256:2a2e76f965d15150… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/a3c8fede034fa27892f87c863cbd5493167d17ed"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:cc268fbdbae6f5648f9fa2da9cbf6bb062f824f659efaf80d931a7b25418a5dc · sha256:2a2e76f965d15150… · /containers/cna/references/1

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer