Use-after-free in Linux kernel - CVE-2026-97608

Vulnerability details

The vulnerability allows a local user to cause a denial of service, disclose sensitive information, or modify data.

The vulnerability exists due to a race condition leading to a use-after-free in the netfilter nf_log logger backends when unregistering logger backends during per-network namespace teardown. A local user can rebind a logger through a sysctl or netlink writer after the prior per-network logger selection has been cleared to cause a denial of service, disclose sensitive information, or modify data.

Affected software

How to mitigate CVE-2026-97608

External References

• https://git.kernel.org/stable/c/2c018cc4842c33f0c732962e2ab58635e8ae5823
• https://git.kernel.org/stable/c/64803ba0a05791cf9ca874466480e4c4cadaf7ab
• https://git.kernel.org/stable/c/dce24f3a146948595bb1b86347f31e20b4975daa
• https://git.kernel.org/stable/c/eaec35fae8f2052c1878a5c7cc7699d8357d79f2

Related Security Bulletins

• Use-after-free in Linux kernel netfilter