CVE-2026-64150

netfilter: nft_inner: release local_lock before re-enabling softirqs

State: Published
Severity: 9.8 Critical
Published: Jul 19, 2026
Updated: Aug 5, 2026
Reserved: Jul 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft_inner: release local_lock before re-enabling softirqs

Quoting sashiko: In the error path, local_bh_enable() is called before local_unlock_nested_bh().

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	ba36fada9ab487634f61f92769c95bc148aa8f49 to before df19b6af171695a1352314597c9a4311d48d5171Affected ba36fada9ab487634f61f92769c95bc148aa8f49 to before 6fecd39c6401134b58505bc4eb1adc8a0e2fe992Affected ba36fada9ab487634f61f92769c95bc148aa8f49 to before a6cb3ff979855f7f0ee9450a947fe8f96c2ba37aAffected
LinuxLinux	6.16Affected before 6.16Not affected 6.18.34 through 6.18.Not affected 7.0.11 through 7.0.Not affected 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.