In the Linux kernel, the following vulnerability has been resolved:
netfilter: flowtable: publish GC-visible tuple last
nf_flow_table_iterate() only treats original-direction tuple nodes as owning entries. Publishing the original node first lets GC observe and free a flow while flow_offload_add() is still inserting the reply node. Publish the reply node first and the original node last so GC never sees a partially installed flow.
KASAN can trigger slab-use-after-free read and write reports in the flowtable/rhashtable path (rht_deferred_worker, jhash, flow_offload_del, flow_offload_lookup, etc.).
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdumpUpgrade kernel-debug-modules-extraUpgrade kernel-headersUpgrade kernel-rt-modulesUpgrade bpftoolUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-docUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-debug-coreUpgrade kernel-rt-debug-coreUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modulesUpgrade kernel-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-rt-coreUpgrade perfUpgrade kernel-develUpgrade kernelUpgrade kernel-tools-libs-develUpgrade python3-perfUpgrade kernel-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debugUpgrade kernel-cross-headersUpgrade kernel-debug-develUpgrade kernel-rt-devel | Oct 11, 2026 | Oct 5, 2026 |
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.268-266.1092Upgrade python-perf-debuginfoUpgrade python-perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-livepatch-5.15.220-153.252Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64 | Oct 19, 2026 | Oct 19, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel6.18-modules-extraUpgrade kernel6.18-headersUpgrade kernel6.18-toolsUpgrade kernel6.18-debuginfo-common-aarch64Upgrade kernel6.18-tools-develUpgrade kernel-livepatch-6.18.48-107.148Upgrade kernel6.18-develUpgrade bpftool6.18Upgrade kernel6.18-debuginfoUpgrade kernel6.18Upgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel6.18-modules-extra-commonUpgrade python3-perf6.18-debuginfoUpgrade bpftool6.18-debuginfoUpgrade perf6.18Upgrade perf6.18-debuginfoUpgrade python3-perf6.18Upgrade microvm-kernel6.18Upgrade kernel6.18-tools-debuginfo | Sep 30, 2026 | Aug 26, 2026 |
| Debian | — | Upgrade linuxUpgrade linux-6.12 | Aug 27, 2026 | Aug 27, 2026 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Aug 31, 2026 | Aug 26, 2026 |
| Rocky_linux | — | Upgrade kernel-develUpgrade kernel-coreUpgrade kernel-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-rt-debug-develUpgrade python3-perfUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-debug-coreUpgrade bpftoolUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-debugUpgrade perfUpgrade kernel-rt-coreUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modulesUpgrade bpftool-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade perf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rt-kvmUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernel-rt | Oct 7, 2026 | Oct 6, 2026 |
| Ubuntu | — | Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-6.8.0-1036-nvidia-tegraUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-1036-nvidia-tegra-rtUpgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-tegra-6.8 | Oct 7, 2026 | Oct 6, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 15, 2026 | Aug 26, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub