In the Linux kernel, the following vulnerability has been resolved:
xfrm: Update ipcomp_scratches with NULL when freed
Currently if ipcomp_alloc_scratches() fails to allocate memory ipcomp_scratches holds obsolete address. So when we try to free the percpu scratches using ipcomp_free_scratches() it tries to vfree non existent vm area. Described below:
static void * __percpu *ipcomp_alloc_scratches(void) { ... scratches = alloc_percpu(void *); if (!scratches) return NULL; ipcomp_scratches does not know about this allocation failure. Therefore holding the old obsolete address. ... }
So when we free,
static void ipcomp_free_scratches(void) { ... scratches = ipcomp_scratches; Assigning obsolete address from ipcomp_scratches
if (!scratches) return;
for_each_possible_cpu(i) vfree(*per_cpu_ptr(scratches, i)); Trying to free non existent page, causing warning: trying to vfree existent vm area. ... }
Fix this breakage by updating ipcomp_scrtches with NULL when scratches is freed
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade bpftoolUpgrade python-perf-debuginfoUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.75-48.135Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-4.14.296-222.539Upgrade kernel-tools-develUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.155-138.670Upgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64 | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | Oct 24, 2025 | Oct 24, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Feb 3, 2026 | Feb 2, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 22, 2025 |
| Ubuntu | — | Upgrade linux-fipsUpgrade linux-aws-hweUpgrade linux-awsUpgrade linux-oracle-5.4Upgrade linux-gcp-5.4Upgrade linux-ibm-5.4Upgrade linux-riscv-5.15Upgrade linuxUpgrade linux-aws-5.15Upgrade linux-gcpUpgrade linux-azure-fipsUpgrade linux-gkeUpgrade linux-realtimeUpgrade linux-azure-5.15Upgrade linux-gcp-5.15Upgrade linux-gkeopUpgrade linux-hwe-5.15Upgrade linux-gcp-fipsUpgrade linux-intel-iotg-5.15Upgrade linux-xilinx-zynqmpUpgrade linux-aws-fipsUpgrade linux-raspiUpgrade linux-azure-4.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-hweUpgrade linux-azure-fde-5.15Upgrade linux-oracleUpgrade linux-kvmUpgrade linux-raspi-5.4Upgrade linux-azure-5.4Upgrade linux-bluefieldUpgrade linux-iotUpgrade linux-hwe-5.4Upgrade linux-gcp-4.15Upgrade linux-aws-5.4Upgrade linux-azureUpgrade linux-ibmUpgrade linux-oracle-5.15Upgrade linux-intel-iotgUpgrade linux-nvidiaUpgrade linux-lowlatency | Oct 28, 2025 | Oct 24, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Oct 22, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub