Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-52988

netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.10.271, 5.15.222, 6.1.189, 6.6.158, 6.12.112, and 2 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: partial

Summary

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase Publish new hooks in the list into the basechain/flowtable using splice_list_rcu() to ensure netlink dump list traversal via rcu is safe while concurrent ruleset update is going on.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: partial

  3. Record last updated

Affected versions

  • Linux Linux

    From 78d9f48f7f44431a25da2b46b3a8812f6ff2b981 · fixed in ed8d3bd8272e49ea987100de2abfb13710329a9b; From 78d9f48f7f44431a25da2b46b3a8812f6ff2b981 · fixed in 8fdd2204503ab1ce07dc000c277e2c3edf96a67b; From 78d9f48f7f44431a25da2b46b3a8812f6ff2b981 · fixed in 5593c640f9daedec8de61555c41e1019fa675aa6; From 78d9f48f7f44431a25da2b46b3a8812f6ff2b981 · fixed in 00e370627f2e1fb3585f9d26348b1abddc75442b; From 78d9f48f7f44431a25da2b46b3a8812f6ff2b981 · fixed in 28ecfb3d1fe8dea70319de7051cb6718c25b5b52; From 78d9f48f7f44431a25da2b46b3a8812f6ff2b981 · fixed in a557816c6e38e9473d99aa9ea8c662f55fc85847; From 78d9f48f7f44431a25da2b46b3a8812f6ff2b981 · fixed in 1346be9379639c30877083b12747d4eacb83c24f; From 78d9f48f7f44431a25da2b46b3a8812f6ff2b981 · fixed in a6134e62dba2ea4f760b29d5226907f447c92400

  • Linux Linux

    5.8

  • KernelLinux

    From 5.8.0 · fixed in 5.10.271; From 5.11.0 · fixed in 5.15.222; From 5.16.0 · fixed in 6.1.189; From 6.2.0 · fixed in 6.6.158; From 6.7.0 · fixed in 6.12.112; From 6.13.0 · fixed in 6.18.55; From 6.19.0 · fixed in 7.0.10

References 8

git.kernel.org