PT-2026-27757 · Linux+2 · Linux Kernel+2
CVE-2026-23392
·
Published
2026-01-01
·
Updated
2026-07-24
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The Linux kernel contains an issue where a flowtable is not properly released after an error, potentially leading to a use-after-free condition. This can occur when unregistering hooks from an error path, specifically when a hook already refers to the flowtable and is exposed to the packet path or the nfnetlink hook control plane. The error path is rare, typically occurring when reaching the maximum number of hooks or failing to set up hardware offload. The issue was uncovered by KASAN reporting a use-after-free from the nfnetlink hook path during hook dumping.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Rocky Linux