THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-46172 (MEDIUM 5.5) — In the Linux kernel, the following vulnerability has been resolved: ipv6: xfrm6: release dst on error in xfrm6_rcv_encap() xfrm6_rcv_encap() performs an IPv6 route lookup when the skb does not already have a dst attached. ip6_route_input_lookup() returns a referenced dst entry

[NVD] CVE-2026-46172 (MEDIUM 5.5) — In the Linux kernel, the following vulnerability has been resolved: ipv6: xfrm6: release dst on error in xfrm6_rcv_encap() xfrm6_rcv_encap() performs an IPv6 route lookup when the skb does not already have a dst attached. ip6_route_input_lookup() returns a referenced dst entry

lownvdPublished 2026-05-28

CVE-2026-46172 CVSS: 5.5 MEDIUM Published: 2026-05-28T10:16:32.830

In the Linux kernel, the following vulnerability has been resolved:

ipv6: xfrm6: release dst on error in xfrm6_rcv_encap()

xfrm6_rcv_encap() performs an IPv6 route lookup when the skb does not already have a dst attached. ip6_route_input_lookup() returns a referenced dst entry even when the lookup resolves to an error route.

Indicators of compromise

CVE-2026-46172cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-46172