CVE-2026-53212: netfilter: nft_tunnel: fix use-after-free on object destroy
In the Linux kernel, the following vulnerability has been resolved:
Other sources
netfilter: nfttunnel: fix use-after-free on object destroy
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.143.1-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.187-1Fixed in 6.12.107-1Fixed in 7.2.6-1Fixed in 7.2.7-1 - Compensating control
In nft_tunnel_obj_destroy(), replace metadata_dst_free() with dst_release() so metadata_dst is freed only after all dst_entry references are dropped.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53212?
CVE-2026-53212 has a high severity score of 7.8.
What type of vulnerability is CVE-2026-53212?
CVE-2026-53212 is classified as a Use After Free vulnerability in the Linux kernel.
How do I fix CVE-2026-53212?
CVE-2026-53212 can be fixed by applying the available patch from the Linux kernel.
Which software is impacted by CVE-2026-53212?
CVE-2026-53212 affects the Linux kernel and specifically the Microsoft azl3 kernel version 6.6.141.1-1.
What component is involved in CVE-2026-53212?
CVE-2026-53212 involves the netfilter nft_tunnel component and concerns a use-after-free issue during object destruction.