PT-2026-26583 · Linux · Linux Kernel

Published 2026-01-01 · Updated 2026-05-26 · CVE-2026-23278

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains an issue within the netfilter subsystem related to nf tables. During transaction processing, multiple catchall elements may exist, including one active and one pending from a new batch. If the map containing these catchall elements is being removed, all catchall elements must be toggled, not just the first viable candidate. Failure to do so can lead to a warning related to nft data release and potential issues with element destruction and transaction handling. The issue involves the nft data release function and impacts the processing of catchall elements within nf tables.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-459

CWE-20

Related Identifiers

BDU:2026-04311

CVE-2026-23278

ECHO-F760-EA53-3003

OESA-2026-1862

OESA-2026-1863

OESA-2026-1864

OPENSUSE-SU-2026:20572-1

SUSE-SU-2026:1573-1

SUSE-SU-2026:1643-1

SUSE-SU-2026:1661-1

SUSE-SU-2026:21114-1

SUSE-SU-2026:21123-1

SUSE-SU-2026:21237-1

SUSE-SU-2026:21255-1

SUSE-SU-2026:21352-1

SUSE-SU-2026:21361-1

Affected Products

Linux Kernel

References · 271

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23278.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-23362 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23245 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23368 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23302 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:21255-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-23278 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23304 · Security Note
• https://ubuntu.com/security/CVE-2026-23278 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23403 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23375 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23393 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23409 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2404-CVE-2026-23278 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-23278 · Vendor Advisory