CVE-2026-46324CWE-362

CVE-2026-46324

High · published June 9, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
0.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: use list_del_rcu for netlink hooks

nft_netdev_unregister_hooks and __nft_unregister_flowtable_net_hooks need

to use list_del_rcu(), this list can be walked by concurrent dumpers.

Add a new helper and use it consistently.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00096 · 0.6th percentile
Weakness
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Published
2026-06-09T17:16Z
Affected products (8)
ProductVersionsFixed in
linux/linux_kernel≥ 4.19.316, < 4.204.20
linux/linux_kernel≥ 5.4.262, < 5.55.5
linux/linux_kernel≥ 5.10.198, < 5.115.11
linux/linux_kernel≥ 5.15.45, < 5.165.16
linux/linux_kernel≥ 5.17.13, < 5.185.18
linux/linux_kernel≥ 5.18.2, < 6.18.336.18.33
linux/linux_kernel≥ 6.19, < 7.0.107.0.10
linux/linux_kernelall versions—
References (5)
EPSS history
Timeline
  • 09 JUN 12:11Z
    netfilter: nf_tables: use list_del_rcu for netlink hooks
    cvelistv5