PT-2026-28332 · Linux · Linux Kernel

Published 2026-01-01 · Updated 2026-04-20 · CVE-2026-23399

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a memory leak within the nf tables module, specifically in the nft dynset component. This issue occurs when cloning stateful expressions. If the allocation of the second stateful expression fails during the cloning process via GFP ATOMIC, the first stateful expression remains allocated but unreferenced, leading to a memory leak. The affected functions include pcpu alloc noprof, nft counter clone, nft expr clone, nft dynset new, nft rhash update, nft dynset eval, nft do chain, nft do chain ipv4, and nf hook slow.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CVE-2026-23399

ECHO-7B1B-5BD3-02E3

OESA-2026-1862

OESA-2026-1863

OESA-2026-1864

OPENSUSE-SU-2026:20826-1

SUSE-SU-2026:21841-1

SUSE-SU-2026:21845-1

SUSE-SU-2026:21860-1

SUSE-SU-2026:2217-1

Affected Products

Linux Kernel

References · 76

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23399.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-23404 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23401 · Security Note
• https://git.kernel.org/stable/c/31641c682db73353e4647e40735c7f2a75ff58ef · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-68315 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23392 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23368 · Security Note
• https://cve.org/CVERecord?id=CVE-2026-23399 · Security Note
• https://osv.dev/vulnerability/OESA-2026-1862 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1864 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23096 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23408 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23371 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23255 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23381 · Security Note