CVE-2026-74565
Received Received - Intake

Use-After-Free in Linux Kernel nf_tables

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: make nft_object rhltable per table The nft_object rhltable is global, this allows for accessing objects that are being dismangled from lookup path by other existing netns. Given the nft_obj_destroy() releases the object inmediately, this might lead to use-after-free of these objects that are being released. Make the existing rhltable per table to address this issue to deal with with the nft_rcv_nl_event() path too. Update nft_obj_lookup() to take the table as non-const, otherwise, compiler complains when passing the objname_ht to rhltable_lookup().

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-74565
EUVD
EUVD-2026-59630

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux_kernel linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in the Linux kernel's netfilter subsystem, specifically in the nf_tables component. It involves a global nft_object rhltable that allows access to objects being removed from the lookup path by other network namespaces. When nft_obj_destroy() releases an object immediately, it can lead to a use-after-free scenario where objects are accessed after being freed.

Impact Analysis

This vulnerability could allow an attacker to exploit a use-after-free condition, potentially leading to system crashes, privilege escalation, or arbitrary code execution. It affects systems using the Linux kernel with nf_tables enabled, which is common in firewalls and network filtering.

Mitigation Strategies

Update the Linux kernel to the latest patched version to resolve the nf_tables use-after-free vulnerability. Monitor vendor advisories for kernel updates and apply them promptly.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-74565. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart