AZL-83279
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-83279.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-83279
- Upstream
- Published
- 2026-04-22T14:16:51Z
- Modified
- 2026-08-28T17:48:03.098916844Z
- Summary
- CVE-2026-31518 affecting package kernel for versions less than 6.6.134.1-2
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
esp: fix skb leak with espintcp and async crypto
When the TX queue for espintcp is full, espoutputtail_tcp will return an error and not free the skb, because with synchronous crypto, the common xfrm output code will drop the packet for us.
With async crypto (espoutputdone), we need to drop the skb when espoutputtail_tcp returns an error.
- References