CVE-2026-52988: netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nftables: join hook list via splicelistrcu() in commit phase
Publish new hooks in the list into the basechain/flowtable using splicelistrcu() to ensure netlink dump list traversal via rcu is safe while concurrent ruleset update is going on.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Ensure the Linux kernel netfilter nf_tables change is applied so netfilter publishes hooks into the basechain/flowtable by joining the hook list via splice_list_rcu() in the commit phase, making netlink dump list traversal via RCU safe during concurrent ruleset updates.
Event History
Frequently Asked Questions
Is this remotely exploitable over the network?
The CVSS vector lists local attack access (AV:L), so exploitation requires local access rather than network reachability.
What conditions are involved in triggering the issue?
The issue involves netlink dump list traversal occurring while a concurrent nftables ruleset update is in progress. The affected code publishes new hooks into basechains or flowtables during the commit phase.
What is the potential impact if exploitation succeeds?
The CVSS assessment indicates high confidentiality and availability impact, with no integrity impact listed. It also requires low privileges and no user interaction.