PT-2026-29719 · Linux · Linux Kernel

Yiming Qian · Published 2026-04-02 · Updated 2026-04-20 · CVE-2026-23412

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free (UaF) issue was identified in the netfilter component of the Linux kernel related to the handling of BPF hooks. Specifically, the vulnerability occurs when dumping hooks via nfnetlink hooks, potentially leading to memory corruption. The issue was reported by Yiming Qian and involves a race condition where memory is released before all readers have completed, resulting in a use-after-free condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2026-23412

SUSE-SU-2026:21114-1

SUSE-SU-2026:21123-1

SUSE-SU-2026:21255-1

Affected Products

Linux Kernel

References · 166

• https://security-tracker.debian.org/tracker/CVE-2026-23412 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:21255-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23412 · Security Note
• https://ubuntu.com/security/CVE-2026-23412 · Vendor Advisory
• https://git.kernel.org/stable/c/c25e0dec366ae99b7264324ce3c7cbaea34691f9 · Patch
• https://git.kernel.org/stable/c/cb2bf5efdb02a2a59faf603604a1066e8266f349 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-23412 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:21114-1 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-23412 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:21123-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-23412 · Vendor Advisory
• https://git.kernel.org/stable/c/54244d54a971c26a0cd0a9073460ff71f3c51b32 · Patch
• https://git.kernel.org/stable/c/d016c216bc75c45128160593a77b864a04dbe7c0 · Patch
• https://cve.org/CVERecord?id=CVE-2026-23412 · Security Note
• https://git.kernel.org/stable/c/24f90fa3994b992d1a09003a3db2599330a5232a · Patch