nf_tables security

CVE-2026-46324, published by NVD on June 9, 2026, is a newly recorded Linux kernel netfilter/nf_tables vulnerability fixed by changing hook removal paths to use list_del_rcu() when netlink dumpers may still be walking the same lists. The bug is not yet scored by NVD, which means defenders do not...

CVE-2026-31665 is a newly published Linux kernel vulnerability in netfilter, the packet-filtering framework that underpins nftables, conntrack, NAT, and many Linux firewall deployments. The bug is a use-after-free in the nftables connection-tracking timeout object destruction path, where the...

This latest Linux kernel CVE is a reminder that the most dangerous bugs are not always the loudest ones. CVE-2026-23272 affects netfilter’s nf_tables subsystem, where a subtle accounting and lifetime bug could let a set element be published and then removed without waiting for an RCU grace...