CVE-2026-74565
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
netfilter: nf_tables: make nft_object rhltable per table
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: make nft_object rhltable per table The nft_object rhltable is global, this allows for accessing objects that are being dismangled from lookup path by other existing netns. Given the nft_obj_destroy() releases the object inmediately, this might lead to use-after-free of these objects that are being released. Make the existing rhltable per table to address this issue to deal with with the nft_rcv_nl_event() path too. Update nft_obj_lookup() to take the table as non-const, otherwise, compiler complains when passing the objname_ht to rhltable_lookup().
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 4d44175aa5bb5f68772b1eb0306554812294ca52 | affected | git | 4b549d32d34ee765527e63726bb1af984876e776 | Unavailable | None listed |
| 4d44175aa5bb5f68772b1eb0306554812294ca52 | affected | git | 523c881661dde67efb44fce38c8eed50a72a57c1 | Unavailable | None listed |
| 4d44175aa5bb5f68772b1eb0306554812294ca52 | affected | git | 71714a2cec6c6d79bbd425ad968f9d6a3e4a2066 | Unavailable | None listed |
| 4d44175aa5bb5f68772b1eb0306554812294ca52 | affected | git | 1948e4f85b855618b5b9a27265f98d816f4cb7cb | Unavailable | None listed |
| 4d44175aa5bb5f68772b1eb0306554812294ca52 | affected | git | 63ba12b664a2cd3220ed43e22c717715f4cc2ae8 | Unavailable | None listed |
| 4d44175aa5bb5f68772b1eb0306554812294ca52 | affected | git | 7d4789b58761d9d48d9b5f5e7e0a510c3bbfb3af | Unavailable | None listed |
| 4d44175aa5bb5f68772b1eb0306554812294ca52 | affected | git | f4f699790590bd0896c48a71e9232a65198f92f0 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 5.1 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 5.1 | Unavailable | None listed |
| 5.10.270 | unaffected | semver | Unavailable | 5.10.* | None listed |
| 6.1.188 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.6.160 | unaffected | semver | Unavailable | 6.6.* | None listed |
| 6.12.103 | unaffected | semver | Unavailable | 6.12.* | None listed |
| 6.18.44 | unaffected | semver | Unavailable | 6.18.* | None listed |
| 7.1.8 | unaffected | semver | Unavailable | 7.1.* | None listed |
| 7.2 | unaffected | original_commit_for_fix | Unavailable | * | None listed |