SECUFOCUSNOW
Home›CVE index›CVE-2026-23392
Review reviewHigh

CVE-2026-23392

Linux Linux, SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: release flowtable after rcu grace period on error Call synchronize_rcu() after unregistering the hooks from error path, since a hook that already refers to this flowtable can be already registered, exposing this flowtable to packet path and nfnetlink_hook control plane. This error path is rare, it should only happen by reaching the maximum number hooks or by failing to set up to hardware offload, just call synchronize_rcu(). There is a check for already used device hooks by different flowtable that cou...

CVSS
7.8
EPSS
0.12%
2.10% percentile
CISA KEV
Not listed
Published
2026.03.25
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.12%
Technical severityCVSS 7.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: release flowtable after rcu grace period on error Call synchronize_rcu() after unregistering the hooks from error path, since a hook that already refers to this flowtable can be already registered, exposing this flowtable to packet path and nfnetlink_hook control plane. This error path is rare, it should only happen by reaching the maximum number hooks or by failing to set up to hardware offload, just call synchronize_rcu(). There is a check for already used device hooks by different flowtable that cou...

Affected product and versions

Product
Linux Linux, SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
Affected versions
>= 3b49e2e94e6ebb8b23d0955d9e898254455734f8 < d2632de96ccb066e0131ad1494241b9c281c60b8, >= 3b49e2e94e6ebb8b23d0955d9e898254455734f8 < adee3436ccd29f1e514c028899e400cbc6d84065, >= 3b49e2e94e6ebb8b23d0955d9e898254455734f8 < 7e3955b282eae20d61c75e499c75eade51c20060, >= 3b49e2e94e6ebb8b23d0955d9e898254455734f8 < c8092edb9a11f20f95ccceeb9422b7dd0df337bd, >= 3b49e2e94e6ebb8b23d0955d9e898254455734f8 < e78a2dcc7cfb87b64a631441ca7681492b347ef6, >= 3b49e2e94e6ebb8b23d0955d9e898254455734f8 < d73f4b53aaaea4c95f245e491aa5eeb8a21874ce, >= 4.16, >= V3.1.6, >= V3.1.5, >= 4.16.1 < 6.1.167, >= 6.2 < 6.6.130, >= 6.7 < 6.12.78, >= 6.13 < 6.18.20, >= 6.19 < 6.19.10, 4.16, 7.0
Fixed versions
6.1.167, 6.6.130, 6.12.78, 6.18.20, 6.19.10

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-416