Today cve organization has published a new vulnerability affects how ESP-in-UDP packets are handled — specifically, when MSG_SPLICE_PAGES attaches pipe-backed pages to a socket buffer, ESP input may decrypt in place over memory it doesn't privately own, leading to potential data corruption or memory safety issues. For more detail information refers this article:
https://www.cve.org/CVERecord?id=CVE-2026-43284

There have been a few workarounds found:

• Restrict shell access --> This is affected for operators with shell access privilege.
• Apply the AlmaLinux mitigation only if IPsec is unused --> Breaks IPsec: https://almalinux.org/blog/2026-05-07-dirty-frag/ (not recommended)