Possible 26.2 memory leak regression in Network, when multiple NEXT active

Hi, After the release of macOS Tahoe 26.2. We are seeing memory leaks if our Network Protection Extension is used alongside the Apple Built In Firewall, a second Security Solution that does Network Protection and a VPN. Our NEXT, socketfilterfw and the other security solution consume instead of a few MB of Memory now multiple Gigabytes of Memory. This issue started with the public release of macOS Tahoe 26.2, this issue was not present in earlier versions of macOS and the same set of Software. Just testing our solution by itself will not show this behavior. I unfortunately can't try to reproduce the issue on my test device that runs the latest 26.3 beta as I do not have the third party software installed there and I can't get it.

Our Network extension implements depending on the license and enabled features:

  • NEFilterDataProvider
  • NEDNSProxyProvider
  • NETransparentProxyProvider

For all man in the middle Use Cases we are using Network Framework, to communicate with the peers. And leaks suggest that the there is a memory leak within internals of the Network Framework.

Here is a shortened sample of the leaks output of our Network extension. However, the third party NEXT does show the same leaks. More details can be found on the Feedback with the ID FB21649104

snippet is blocking post? sensitive language 

Does anyone see similar issues or has an idea what could cause this issue, except a regression of the Network.framework introduced with macOS Tahoe 26.2?

Best Regards, Timo

Answered by DTS Engineer in 874052022

Thanks for opening a forums thread about this.

More details can be found on the Feedback with the ID FB21649104

And thanks for filing that.

Based on the analysis in that bug report, my understanding is that:

  • This is a known issue.
  • We believe it’s fixed in macOS 26.3 beta.

Please try reproducing this with the latest 26.3 beta seed and let us know how you get along.

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

I couldn't post the snippet as it fails the sensitive language check... So I try to add it as text file [here]

Thanks for opening a forums thread about this.

More details can be found on the Feedback with the ID FB21649104

And thanks for filing that.

Based on the analysis in that bug report, my understanding is that:

  • This is a known issue.
  • We believe it’s fixed in macOS 26.3 beta.

Please try reproducing this with the latest 26.3 beta seed and let us know how you get along.

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

Possible 26.2 memory leak regression in Network, when multiple NEXT active
 
 
Q