CVE-2026-74260

netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them

State: Published
Severity: 7.8 High
Published: Aug 15, 2026
Updated: Oct 15, 2026
Reserved: Aug 15, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them

Update nft_dup and nft_fwd to use the nf_dev_xmit_recursion() helpers. This patch also disables BH when transmitting the skb to address a possible migration to different CPU leading to imbalanced decrementation of the recursion counters.

This is modeled after Florian Westphal's dev_xmit_recursion*() API available since commit 97cdcf37b57e ("net: place xmit recursion in softnet data") according to its current state in the tree.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	f37ad91270397a6d053e8623bdb3cf79859691d2 to before 53fb46cf933dc4361c1a72491e247841d0b0fc85Affected f37ad91270397a6d053e8623bdb3cf79859691d2 to before edf234f71fb327792196f813048ab8f5bd3bb712Affected f37ad91270397a6d053e8623bdb3cf79859691d2 to before 2354e975932dabb06fad239f07a3b68fd1809737Affected
LinuxLinux	6.16Affected before 6.16Not affected 6.18.57 through 6.18.Not affected 7.1.5 through 7.1.Not affected 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.