Riskcovery

CVE-2026-53269

netfilter: synproxy: add mutex to guard hook reference counting

State
Published
Severity
Not scored
Published
Jun 25, 2026
Updated
Oct 15, 2026
Reserved
Jun 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: synproxy: add mutex to guard hook reference counting

As the synproxy infrastructure register netfilter hooks on-demand when a user adds the first iptables target or nftables expression, if done concurrently they can race each other.

Introduce a mutex to serialize the refcount control blocks access from both frontends. While a per namespace mutex might be more efficient, it is not needed for target/expression like SYNPROXY.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • ad49d86e07a497e834cb06f2b151dccd75f8e148 to before 0ec9ddc1bda261a2c57636c74c8b4e53000102c9Affected
  • ad49d86e07a497e834cb06f2b151dccd75f8e148 to before 56ffbe3a08c01dcdb0d6adee9ce1e535bfb3b389Affected
  • ad49d86e07a497e834cb06f2b151dccd75f8e148 to before debc57b83d5b323df74bf010c8d50fe26ad2ed6bAffected
  • ad49d86e07a497e834cb06f2b151dccd75f8e148 to before 0f8ba5e4c53d2e4a536aa68140beda9fe59b2f88Affected
  • ad49d86e07a497e834cb06f2b151dccd75f8e148 to before 640441348258220e78daed40528b85b8afcedab6Affected
  • ad49d86e07a497e834cb06f2b151dccd75f8e148 to before aaf80701dc2f7a48fe543961e21f8ca3924d587cAffected
  • ad49d86e07a497e834cb06f2b151dccd75f8e148 to before fbf0591275f50eae5733c3d7a8cd6c1e79933ffaAffected
  • ad49d86e07a497e834cb06f2b151dccd75f8e148 to before 2fcba19caaeb2a33017459d3430f057967bb91b6Affected
LinuxLinux
  • 5.3Affected
  • before 5.3Not affected
  • 5.10.259 through 5.10.*Not affected
  • 5.15.210 through 5.15.*Not affected
  • 6.1.176 through 6.1.*Not affected
  • 6.6.143 through 6.6.*Not affected
  • 6.12.94 through 6.12.*Not affected
  • 6.18.36 through 6.18.*Not affected
  • 7.0.13 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.