CVE-2026-63858

설명

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: add hook transactions for device deletions Restore the flag that indicates that the hook is going away, ie. NFT_HOOK_REMOVE, but add a new transaction object to track deletion of hooks without altering the basechain/flowtable hook_list during the preparation phase. The existing approach that moves the hook from the basechain/flowtable hook_list to transaction hook_list breaks netlink dump path readers of this RCU-protected list. It should be possible use an array for nft_trans_hook to store the deleted...

영향 제품·버전

제품 Linux

영향 버전 Linux >= b6d9014a3335194590abdd2a2471ef5147a67645 < 4e69bfb32b2db323d9205fdb30e284481b37817c, >= b6d9014a3335194590abdd2a2471ef5147a67645 < 10f79dbd7719d1da9f5884d13060322d8729f091, >= 7a248f9c74f9f62799718c12efd9e9e391d60b6f, >= f275989ad04159dbfc62cefb65ba9c5ba1d7c34f, >= 62d91062058b42bf70b2c3446aec397bb0ce15ee, >= 99180dec5ae582227219d1fdd0dd5ccf53ec7491, >= 5.10.122 < 5.11, >= 5.15.47 < 5.16, >= 5.17.15 < 5.18, >= 5.18.4 < 5.19, >= 5.19

수정 버전 Linux · 수정 버전은 공급사 공식자료 확인 필요

기술 정보

CVSS 벡터 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE 미등록