SB20260928332 - Use-after-free in Linux kernel netfilter

Description

This security bulletin contains information about 1 vulnerability.

1) Use-after-free (CVE-ID: CVE-2026-97608)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 7.3 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause a denial of service, disclose sensitive information, or modify data.

The vulnerability exists due to a race condition leading to a use-after-free in the netfilter nf_log logger backends when unregistering logger backends during per-network namespace teardown. A local user can rebind a logger through a sysctl or netlink writer after the prior per-network logger selection has been cleared to cause a denial of service, disclose sensitive information, or modify data.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/2c018cc4842c33f0c732962e2ab58635e8ae5823
• https://git.kernel.org/stable/c/64803ba0a05791cf9ca874466480e4c4cadaf7ab
• https://git.kernel.org/stable/c/dce24f3a146948595bb1b86347f31e20b4975daa
• https://git.kernel.org/stable/c/eaec35fae8f2052c1878a5c7cc7699d8357d79f2