A vulnerability classified as critical has been found in Linux Kernel up to 6.6.135/6.12.82/6.18.23/6.19.13. This affects the function xfrm_policy_fini of the component xfrm. The manipulation leads to null pointer dereference.

This vulnerability is referenced as CVE-2026-43091. The attack needs to be initiated within the local network. No exploit is available.

It is recommended to upgrade the affected component.