PT-2026-30152 · Linux · Linux Kernel

Published 2026-04-03 · Updated 2026-05-03 · CVE-2026-23458

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.0.0-rc2+

Description The Linux kernel contains a use-after-free flaw within the ctnetlink dump exp ct() function, specifically related to conntrack pointer management during netlink dumps. The issue arises when the dump spans multiple rounds, leading to a dereference of a freed conntrack object via nfct help(ct), resulting in a use-after-free on ct->ext. The root cause is the absence of proper .start and .done callbacks in netlink dump control to manage the conntrack reference across dump rounds. This flaw can be triggered by a crafted netlink message, potentially leading to system instability or denial of service.

Recommendations Update to Linux kernel version 7.0.0-rc2+ or later to address this vulnerability.

Fix

Related Identifiers

CVE-2026-23458

ECHO-15B4-855C-91B1

OESA-2026-2172

OESA-2026-2173

OESA-2026-2176

Affected Products

Linux Kernel

References · 47

• https://osv.dev/vulnerability/BELL-CVE-2026-23458 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-27558 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23449 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-71089 · Security Note
• https://cve.org/CVERecord?id=CVE-2026-23458 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23457 · Security Note
• https://ubuntu.com/security/CVE-2026-23458 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31428 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23407 · Security Note
• https://osv.dev/vulnerability/OESA-2026-2176 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23447 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23455 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23096 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-23458 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23458 · Security Note