nftables

The Linux kernel’s netfilter subsystem is getting an important corrective update for CVE-2026-23351, a flaw in the nft_set_pipapo set backend that can lead to a use-after-free condition and a local denial of service. The fix is not a simple bounds check or a small cleanup; it restructures...

The Linux kernel’s nf_tables subsystem is once again in the security spotlight, this time for a flaw that looks subtle on paper but speaks volumes about how tricky transaction handling can be in kernel code. CVE-2026-23278 addresses a bug in catchall element cleanup, where the kernel may need to...

The Linux kernel's netfilter subsystem has a new, high-consequence memory-corruption fix that any Linux systems team running nftables must treat as urgent: CVE-2026-23231 patches a race-triggered use-after-free in nf_tables_addchain() that can leave published chain objects accessible to active...

A subtle pointer‑math mistake in the Linux kernel’s Netfilter nf_tables code — tracked as CVE‑2024‑0607 — lets a local actor corrupt internal data by writing eight bytes into a four‑byte slot inside nft_byteorder_eval(), producing memory corruption that leads to kernel instability and reliable...

A subtle misstep in nftables object handling created a classic kernel-level use‑after‑free that has since rippled through distributions and cloud images: an nft object or expression could point to a set in a different nft table, and when that table was removed the remaining dangling reference...

The short answer is: No — Azure Linux is not necessarily the only Microsoft product that could include the vulnerable nf_tables code, but it is the only Microsoft product Microsoft has publicly attested so far as carrying that upstream component. Microsoft’s advisory is a product-level inventory...

The Linux kernel received a targeted fix that addresses a subtle but disruptive netfilter edge case: CVE-2025-68206 adds a seqadj extension inside nftables’ conntrack helper path so NAT’ed FTP control connections (PASV/EPSV) are correctly sequence-adjusted when payload bytes are rewritten — a...

A recently disclosed Linux-kernel vulnerability in the netfilter nftables subsystem can cause a kernel crash when a rule references certain stateful objects from the OUTPUT hook; maintainers fixed the defect by adding proper validation for objref and objrefmap expressions so that referencing a...

On December 6, 2024, Microsoft engineers rolled out the latest update for Azure Linux, officially branded as Azure Linux 3.0.20241203. This version brings significant enhancements to Microsoft’s in-house Linux distribution, designed for Azure services and edge appliances. The update not only...