Review reviewHigh

CVE-2026-63858

Linux

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: add hook transactions for device deletions Restore the flag that indicates that the hook is going away, ie. NFT_HOOK_REMOVE, but add a new transaction object to track deletion of hooks without altering the basechain/flowtable hook_list during the preparation phase. The existing approach that moves the hook from the basechain/flowtable hook_list to transaction hook_list breaks netlink dump path readers of this RCU-protected list. It should be possible use an array for nft_trans_hook to store the deleted...

CVSS: 7.8
EPSS: -
CISA KEV: Not listed
Published: 2026.07.20

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability-

Technical severityCVSS 7.8

Vulnerability overview

Affected product and versions

Product: Linux
Affected versions: >= b6d9014a3335194590abdd2a2471ef5147a67645 < 4e69bfb32b2db323d9205fdb30e284481b37817c, >= b6d9014a3335194590abdd2a2471ef5147a67645 < 10f79dbd7719d1da9f5884d13060322d8729f091, >= 7a248f9c74f9f62799718c12efd9e9e391d60b6f, >= f275989ad04159dbfc62cefb65ba9c5ba1d7c34f, >= 62d91062058b42bf70b2c3446aec397bb0ce15ee, >= 99180dec5ae582227219d1fdd0dd5ccf53ec7491, >= 5.10.122 < 5.11, >= 5.15.47 < 5.16, >= 5.17.15 < 5.18, >= 5.18.4 < 5.19, >= 5.19
Fixed versions: No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE: Not available