CVE-2026-23278

high

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: always walk all pending catchall elements During transaction proces…

Vendor / product: Linux — linux kernel

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: always walk all pending catchall elements During transaction processing we might have more than one catchall element: 1 live catchall element and 1 pending element that is coming as part of the new batch. If the map holding the catchall elements is also going away, its required to toggle all catchall elements and not just the first viable candidate. Otherwise, we get: WARNING: ./include/net/netfilter/nf_tables.h:1281 at nft_data_release+0xb7/0xe0 [nf_tables], CPU#2: nft/1404 RIP: 0010:nft_data_release+0xb7/0xe0 [nf_tables] [..] __nft_set_elem_destroy+0x106/0x380 [nf_tables] nf_tables_abort_release+0x348/0x8d0 [nf_tables] nf_tables_abort+0xcf2/0x3ac0 [nf_tables] nfnetlink_rcv_batch+0x9c9/0x20e0 [..]

CVSS

7.8

7.8 (CVSS v3.1)

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity source: NVD CVSS v3.1 (416baaa9-dc9f-4396-8d5f-8c081fb06d67)

Timeline (UTC)

Published: 2026-03-20 09:16

Modified: 2026-10-30 13:18

NVD status: Modified

Last synced 1 day ago

Verified against the source API 2026-10-30 13:38 UTC

Exploitation

Not listed in CISA KEV (as of last catalog sync)

Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).

Affected products

linux / linux_kernel ≥4.19.316 <4.20, ≥5.4.262 <5.5, ≥5.10.188 <5.11, ≥5.15.121 <5.16, ≥6.1.36 <6.2, ≥6.3.10 <6.4

Weakness classification (CWE)

NVD-CWE-noinfo CWE-416

Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.

Mitigation & advisories

Patch / mitigation: https://git.kernel.org/stable/c/77c26b5056d693ffe5e9f040e946251cdb55ae55

Patch / mitigation: https://git.kernel.org/stable/c/7cb9a23d7ae40a702577d3d8bacb7026f04ac2a9

Patch / mitigation: https://git.kernel.org/stable/c/de47a88c6b807910f05703fb6605f7efdaa11417

Patch / mitigation: https://git.kernel.org/stable/c/eb0948fa13298212c5f8b30ee48efdae4389ab09

References

https://git.kernel.org/stable/c/4830fb44d12f586f3f544609e086933649a9175a 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/77c26b5056d693ffe5e9f040e946251cdb55ae55 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/7cb9a23d7ae40a702577d3d8bacb7026f04ac2a9 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/ae8f3cedc5f5653a5bed45c5ed016fe156e2af55 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/c4d4e86fda707d89eaba80e343321737375f8582 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/de47a88c6b807910f05703fb6605f7efdaa11417 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/eb0948fa13298212c5f8b30ee48efdae4389ab09 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://cert-portal.siemens.com/productcert/html/ssa-784472.html 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e

Data sources

NVD CVE API 2.0 — fetched 2026-10-30 13:38 UTC · record ↗

Learn the basics

Understanding CVEs and CVSS Scores

CVE-2026-23278

Affected products

Weakness classification (CWE)

Mitigation & advisories

References

Data sources

Learn the basics

Related CVEs