#1150891 linux: xfrm interface use-after-free introduced by this version

Package:
linux
Source:
linux
Submitter:
Wissam TALEB
Date:
2026-10-14 13:25:03 UTC
Severity:
normal
Tags:
#1150891#5
Date:
2026-10-14 12:54:17 UTC
From:
To:
Dear Maintainer,

After upgrading the user laptops, we frequently encountered the following error
:
- unregister_netdevice: waiting for nm-xfrm-<id> to become free. Usage count =
-3.

It blocks the vpn connection and the user have to reboot to be able to reuse
the vpn.

The problem doesn't appear in the 6.12.93.

And it was fixed in the mainline v7.2-rc1 via the commit
8045c0df98d4f14c54e5cb875f1c9c0ce89fe4ff : xfrm: Fix dev use-after-free in xfrm
async resumption

#1150891#24
Date:
2026-10-14 13:22:44 UTC
From:
To:
Hi,

Thanks for your report.

I adjusted the metadata of the bug a bit (6.12.94 is not a valid
Debian revision, but the first one having the problem would be
6.1.94-1). The issue is fixed in various stable series and in 6.12.112
as well, which bei included in the next trixie upload as well.

Regards,
Salvatore