CVE-2026-52988

Summary

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase

Publish new hooks in the list into the basechain/flowtable using splice_list_rcu() to ensure netlink dump list traversal via rcu is safe while concurrent ruleset update is going on.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux78d9f48f7f44431a25da2b46b3a8812f6ff2b981 < ed8d3bd8272e49ea987100de2abfb13710329a9baffected
LinuxLinux78d9f48f7f44431a25da2b46b3a8812f6ff2b981 < 8fdd2204503ab1ce07dc000c277e2c3edf96a67baffected
LinuxLinux78d9f48f7f44431a25da2b46b3a8812f6ff2b981 < 5593c640f9daedec8de61555c41e1019fa675aa6affected
LinuxLinux78d9f48f7f44431a25da2b46b3a8812f6ff2b981 < 00e370627f2e1fb3585f9d26348b1abddc75442baffected
LinuxLinux78d9f48f7f44431a25da2b46b3a8812f6ff2b981 < 28ecfb3d1fe8dea70319de7051cb6718c25b5b52affected
LinuxLinux78d9f48f7f44431a25da2b46b3a8812f6ff2b981 < a557816c6e38e9473d99aa9ea8c662f55fc85847affected
LinuxLinux78d9f48f7f44431a25da2b46b3a8812f6ff2b981 < 1346be9379639c30877083b12747d4eacb83c24faffected
LinuxLinux78d9f48f7f44431a25da2b46b3a8812f6ff2b981 < a6134e62dba2ea4f760b29d5226907f447c92400affected
LinuxLinux5.8affected
LinuxLinux0 < 5.8unaffected
LinuxLinux5.10.271 <= 5.10.*unaffected
LinuxLinux5.15.222 <= 5.15.*unaffected
LinuxLinux6.1.189 <= 6.1.*unaffected
LinuxLinux6.6.158 <= 6.6.*unaffected
LinuxLinux6.12.112 <= 6.12.*unaffected
LinuxLinux6.18.55 <= 6.18.*unaffected
LinuxLinux7.0.10 <= 7.0.*unaffected
LinuxLinux7.1 <= *unaffected

Weaknesses

References