SB2026032556 - Use After Free in Linux kernel netfilter

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2026032556

SB2026032556 - Use After Free in Linux kernel netfilter

Published: March 25, 2026

Security Bulletin ID SB2026032556
Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Code execution

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Use After Free (CVE-ID: CVE-2026-23392)

The vulnerability allows a local user to execute arbitrary code or escalate privileges.

The vulnerability exists due to a use-after-free in the netfilter nf_tables component when handling flowtable hooks during error conditions. A local user can trigger a use-after-free condition by exploiting the improper release of a flowtable after an RCU grace period, leading to arbitrary code execution or privilege escalation.

Exploitation requires the ability to interact with the nfnetlink subsystem, typically available to local users with access to netfilter configuration interfaces.


Remediation

Install update from vendor's website.

References