HomeDefectsLIN1023-33874
Fixed

LIN1023-33874 : Security Advisory - linux - CVE-2026-92489

Created: Oct 6, 2026    Updated: Oct 8, 2026
Resolved Date: Oct 7, 2026
Found In Version: 10.23.30.2
Fix Version: 10.23.30.8
Severity: Standard
Applicable for: Wind River Linux LTS 23
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:  xfrm: Fix skb double-free in xfrm_dev_direct_output()  A return value other than 1 from local_out() means that the skb has been consumed or its ownership was transferred. xfrm_dev_direct_output() nevertheless frees the skb on this path, causing a double-free when netfilter drops the packet and invalidating any other owner.  Return the local_out() result directly, matching the ownership handling in xfrm_output_resume().