CVE-2026-74565: netfilter: nf_tables: make nft_object rhltable per table
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nftables: make nftobject rhltable per table
The nftobject rhltable is global, this allows for accessing objects that are being dismangled from lookup path by other existing netns. Given the nftobjdestroy() releases the object inmediately, this might lead to use-after-free of these objects that are being released. Make the existing rhltable per table to address this issue to deal with with the nftrcvnlevent() path too.
Update nftobjlookup() to take the table as non-const, otherwise, compiler complains when passing the objnameht to rhltablelookup().
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-74565?
CVE-2026-74565 has a risk rating of 47, indicating a moderate level of severity.
What types of systems are affected by CVE-2026-74565?
CVE-2026-74565 affects the Linux kernel, particularly versions implementing netfilter and nf_tables.
How do I fix CVE-2026-74565?
To fix CVE-2026-74565, update your Linux kernel to the latest patched version that addresses this vulnerability.
What is the nature of the vulnerability in CVE-2026-74565?
CVE-2026-74565 is a Use After Free vulnerability that allows for improper access to freed objects within the netfilter subsystem.
What are the potential impacts of CVE-2026-74565?
The potential impacts of CVE-2026-74565 include unauthorized access to sensitive data or system instability due to improper memory management.