cve-2026-45897

CVE-2026-45897 is a Linux kernel vulnerability in the netfilter subsystem, specifically in the nft_counter component. It involves a race condition where concurrent dump-and-reset operations can cause packet and byte counters to underflow. The fix uses a global spinlock to serialize the reset path. This CVE highlights how concurrency issues in firewall accounting code can become security vulnerabilities. Discussions on WindowsForum cover the technical details of the bug, its impact on Linux systems, and the broader implications for kernel security. While the vulnerability is Linux-specific, it is relevant to enterprise IT environments that manage mixed OS networks.