SB2026032081 - Use After Free in Linux kernel netfilter

Description

This security bulletin contains information about 1 security vulnerability.

1) Use After Free (CVE-ID: CVE-2026-23272)

The vulnerability allows a local user to execute arbitrary code, escalate privileges, and cause a denial of service.

The vulnerability exists due to a use-after-free in the netfilter nf_tables component when handling set element insertion in a full set. A local user can send a specially crafted request to trigger improper RCU handling, leading to a use-after-free condition.

Exploitation requires non-administrative local privileges and does not require user interaction. The vulnerability occurs during normal operation of netfilter rules with full sets.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/6826131c7674329335ca25df2550163eb8a1fd0c
• https://git.kernel.org/stable/c/ccb8c8f3c1127cf34d18c737309897c68046bf21
• https://git.kernel.org/stable/c/def602e498a4f951da95c95b1b8ce8ae68aa733a