Use-after-free in Linux Kernel Netfilter nf_tables

Publication date: 2026-06-09

Last updated on: 2026-07-08

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: use list_del_rcu for netlink hooks nft_netdev_unregister_hooks and __nft_unregister_flowtable_net_hooks need to use list_del_rcu(), this list can be walked by concurrent dumpers. Add a new helper and use it consistently.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-09

Last Modified

2026-07-08

Generated

2026-07-20

AI Q&A

2026-06-09

EPSS Evaluated

2026-07-18

NVD

CVE-2026-46324

EUVD

EUVD-2026-35414

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	From 5.4.262 (inc) to 5.5 (exc)
linux	linux_kernel	From 4.19.316 (inc) to 4.20 (exc)
linux	linux_kernel	From 5.17.13 (inc) to 5.18 (exc)
linux	linux_kernel	7.1
linux	linux_kernel	From 6.19 (inc) to 7.0.10 (exc)
linux	linux_kernel	From 5.10.198 (inc) to 5.11 (exc)
linux	linux_kernel	From 5.15.45 (inc) to 5.16 (exc)
linux	linux_kernel	From 5.18.2 (inc) to 6.18.33 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel relates to the netfilter subsystem, specifically the nf_tables component. The issue involves the improper use of list manipulation functions for netlink hooks. The functions nft_netdev_unregister_hooks and __nft_unregister_flowtable_net_hooks were not using list_del_rcu(), which is necessary because the list can be accessed concurrently by dumpers. The fix involved adding a new helper function and consistently using list_del_rcu() to safely remove elements from the list.

Impact Analysis

This vulnerability in the Linux kernel's netfilter nf_tables component involves improper use of list_del_rcu for netlink hooks. If exploited, it could potentially lead to issues when concurrent dumpers walk the list, possibly causing instability or unexpected behavior in network filtering operations.

Hi! I’m here to help you understand CVE-2026-46324. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70