CVE-2026-52988

netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase

State: Published
Severity: 7.1 High
Published: Jun 24, 2026
Updated: Oct 19, 2026
Reserved: Jun 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase

Publish new hooks in the list into the basechain/flowtable using splice_list_rcu() to ensure netlink dump list traversal via rcu is safe while concurrent ruleset update is going on.

Scores

CVSS	Score	Vector	Source
3.1	7.1 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H	Linux

Weaknesses

CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected Products

Product	Versions
LinuxLinux	78d9f48f7f44431a25da2b46b3a8812f6ff2b981 to before ed8d3bd8272e49ea987100de2abfb13710329a9bAffected 78d9f48f7f44431a25da2b46b3a8812f6ff2b981 to before 8fdd2204503ab1ce07dc000c277e2c3edf96a67bAffected 78d9f48f7f44431a25da2b46b3a8812f6ff2b981 to before 5593c640f9daedec8de61555c41e1019fa675aa6Affected 78d9f48f7f44431a25da2b46b3a8812f6ff2b981 to before 00e370627f2e1fb3585f9d26348b1abddc75442bAffected 78d9f48f7f44431a25da2b46b3a8812f6ff2b981 to before 28ecfb3d1fe8dea70319de7051cb6718c25b5b52Affected 78d9f48f7f44431a25da2b46b3a8812f6ff2b981 to before a557816c6e38e9473d99aa9ea8c662f55fc85847Affected 78d9f48f7f44431a25da2b46b3a8812f6ff2b981 to before 1346be9379639c30877083b12747d4eacb83c24fAffected 78d9f48f7f44431a25da2b46b3a8812f6ff2b981 to before a6134e62dba2ea4f760b29d5226907f447c92400Affected
LinuxLinux	5.8Affected before 5.8Not affected 5.10.271 through 5.10.Not affected 5.15.222 through 5.15.Not affected 6.1.189 through 6.1.Not affected 6.6.158 through 6.6.Not affected 6.12.112 through 6.12.Not affected 6.18.55 through 6.18.Not affected 7.0.10 through 7.0.*Not affected 7.1 and laterNot affected

Product

Versions

LinuxLinux

78d9f48f7f44431a25da2b46b3a8812f6ff2b981 to before ed8d3bd8272e49ea987100de2abfb13710329a9bAffected
78d9f48f7f44431a25da2b46b3a8812f6ff2b981 to before 8fdd2204503ab1ce07dc000c277e2c3edf96a67bAffected
78d9f48f7f44431a25da2b46b3a8812f6ff2b981 to before 5593c640f9daedec8de61555c41e1019fa675aa6Affected
78d9f48f7f44431a25da2b46b3a8812f6ff2b981 to before 00e370627f2e1fb3585f9d26348b1abddc75442bAffected
78d9f48f7f44431a25da2b46b3a8812f6ff2b981 to before 28ecfb3d1fe8dea70319de7051cb6718c25b5b52Affected
78d9f48f7f44431a25da2b46b3a8812f6ff2b981 to before a557816c6e38e9473d99aa9ea8c662f55fc85847Affected
78d9f48f7f44431a25da2b46b3a8812f6ff2b981 to before 1346be9379639c30877083b12747d4eacb83c24fAffected
78d9f48f7f44431a25da2b46b3a8812f6ff2b981 to before a6134e62dba2ea4f760b29d5226907f447c92400Affected

LinuxLinux

5.8Affected
before 5.8Not affected
5.10.271 through 5.10.*Not affected
5.15.222 through 5.15.*Not affected
6.1.189 through 6.1.*Not affected
6.6.158 through 6.6.*Not affected
6.12.112 through 6.12.*Not affected
6.18.55 through 6.18.*Not affected
7.0.10 through 7.0.*Not affected
7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.