CVE-2026-74565

Received Received - Intake

Use-After-Free in Linux Kernel nf_tables

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: make nft_object rhltable per table The nft_object rhltable is global, this allows for accessing objects that are being dismangled from lookup path by other existing netns. Given the nft_obj_destroy() releases the object inmediately, this might lead to use-after-free of these objects that are being released. Make the existing rhltable per table to address this issue to deal with with the nft_rcv_nl_event() path too. Update nft_obj_lookup() to take the table as non-const, otherwise, compiler complains when passing the objname_ht to rhltable_lookup().

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-74565

EUVD

EUVD-2026-59630

Affected Vendors & Products

Vendor	Product	Version / Range
linux_kernel	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is in the Linux kernel's netfilter subsystem, specifically in the nf_tables component. It involves a global nft_object rhltable that allows access to objects being removed from the lookup path by other network namespaces. When nft_obj_destroy() releases an object immediately, it can lead to a use-after-free scenario where objects are accessed after being freed.

Detection Guidance

This vulnerability is specific to the Linux kernel's netfilter nf_tables component. Detection requires checking kernel versions and nf_tables usage. Use uname -a to verify kernel version and lsmod | grep nf_tables to confirm nf_tables is loaded. Check for crashes or unusual behavior in firewall rules.

Impact Analysis

This vulnerability could allow an attacker to exploit a use-after-free condition, potentially leading to system crashes, privilege escalation, or arbitrary code execution. It affects systems using the Linux kernel with nf_tables enabled, which is common in firewalls and network filtering.

Compliance Impact

This vulnerability involves a use-after-free issue in the Linux kernel's netfilter nf_tables component, which could lead to memory corruption or crashes. Such low-level memory safety issues may indirectly impact compliance by compromising system stability or security controls, but specific effects on GDPR or HIPAA depend on deployment context and mitigations.

Mitigation Strategies

Update the Linux kernel to the latest patched version to resolve the nf_tables use-after-free vulnerability. Monitor vendor advisories for kernel updates and apply them promptly.

Hi! I’m here to help you understand CVE-2026-74565. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70