CVE-2026-93288
Received Received - Intake

BaseFortify

Publication date: 2026-09-24

Last updated on: 2026-09-24

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state sashiko reports: "nfnl_log_net_exit() calls nf_log_unset(), which clears the logger pointer without an RCU grace period. Immediately after, ops_free_list() frees the per-net state while concurrent packets might still be executing nf_log_packet() under rcu_read_lock()." Clear the pointer via .pre_exit to make sure rcu readers have completed before pernet storage is free'd. The change in nf_log_syslog.c is only done for consistency: it doesn't use pernet data.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-24
Last Modified
2026-09-24
Generated
2026-09-24
AI Q&A
2026-09-24
EPSS Evaluated
N/A
NVD
CVE-2026-93288
EUVD
EUVD-2026-86167

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a race condition in the netfilter logging subsystem. When a network namespace is being destroyed, the cleanup function nfnl_log_net_exit() clears a logger pointer without waiting for ongoing RCU-protected operations to complete. This can lead to use-after-free issues if packets are still being processed under an RCU read lock.

Detection Guidance

This vulnerability involves a race condition in the Linux kernel's netfilter nfnetlink_log module. Detection requires checking kernel logs for related errors or kernel crashes during network operations. Commands like dmesg, journalctl -k, or grep for nfnetlink_log in logs may help identify issues.

Impact Analysis

If exploited, this flaw could cause kernel crashes, memory corruption, or privilege escalation. Systems relying on netfilter logging for security monitoring might experience instability or incorrect logging behavior. Attackers could potentially trigger denial-of-service conditions or bypass security controls.

Mitigation Strategies

Apply the latest kernel security patches from your Linux distribution. If patches are unavailable, consider disabling the nfnetlink_log module temporarily via rmmod nfnetlink_log. Monitor system stability and network operations after mitigation.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-93288. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart