rcu use-after-free

  1. CVE-2026-31665: Netfilter nftables Use-After-Free—RCU Fix for Linux Admins

    CVE-2026-31665 is a newly published Linux kernel vulnerability in netfilter, the packet-filtering framework that underpins nftables, conntrack, NAT, and many Linux firewall deployments. The bug is a use-after-free in the nftables connection-tracking timeout object destruction path, where the...
  2. Linux CVE-2026-31680: RCU lifetime mismatch in IPv6 flow label can cause kernel crashes

    A newly published Linux kernel vulnerability, CVE-2026-31680, highlights a familiar but consequential class of networking bugs: a lifetime mismatch in code protected by RCU, Linux’s high-performance read-side synchronization model. The flaw sits in the IPv6 flow label implementation, where a...