Linux Kernel Refcount Leak Vulnerability in xfrm Policy Check

A refcount leak vulnerability has been identified in the Linux kernel's xfrm policy management. The issue arises in the __xfrm_policy_check() function, where an error in fetching a specific policy object leads to a failure to properly decrement the reference count of another policy object. This oversight can cause memory leaks. The vulnerability has been addressed by ensuring the reference count is correctly managed, even when errors occur.

Impact

Exploitation of this vulnerability can lead to memory leaks, potentially causing degradation of system performance or stability.