CVE-2026-74565
Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: make nft_object rhltable per table The nft_object rhltable is global, this allows for accessing objects that are being dismangled from lookup path by other existing netns. Given the nft_obj_destroy() releases the object inmediately, this might lead to use-after-free of these objects that are being released. Make the existing rhltable per table to address this issue to deal with with the nft_rcv_nl_event() path too. Update nft_obj_lookup() to take the table as non-const, otherwise, compiler complains when passing the objname_ht to rhltable_lookup().
How to fix
- Linux Linux4b549d32d34ee765527e63726bb1af984876e776, 523c881661dde67efb44fce38c8eed50a72a57c1, 71714a2cec6c6d79bbd425ad968f9d6a3e4a2066, 1948e4f85b855618b5b9a27265f98d816f4cb7cb, 63ba12b664a2cd3220ed43e22c717715f4cc2ae8, 7d4789b58761d9d48d9b5f5e7e0a510c3bbfb3af, f4f699790590bd0896c48a71e9232a65198f92f0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 4d44175aa5bb5f68772b1eb0306554812294ca52 ≤ v < 4b549d32d34ee765527e63726bb1af984876e776, 4d44175aa5bb5f68772b1eb0306554812294ca52 ≤ v < 523c881661dde67efb44fce38c8eed50a72a57c1, 4d44175aa5bb5f68772b1eb0306554812294ca52 ≤ v < 71714a2cec6c6d79bbd425ad968f9d6a3e4a2066, 4d44175aa5bb5f68772b1eb0306554812294ca52 ≤ v < 1948e4f85b855618b5b9a27265f98d816f4cb7cb, 4d44175aa5bb5f68772b1eb0306554812294ca52 ≤ v < 63ba12b664a2cd3220ed43e22c717715f4cc2ae8, 4d44175aa5bb5f68772b1eb0306554812294ca52 ≤ v < 7d4789b58761d9d48d9b5f5e7e0a510c3bbfb3af, 4d44175aa5bb5f68772b1eb0306554812294ca52 ≤ v < f4f699790590bd0896c48a71e9232a65198f92f0, 5.1 | 4b549d32d34ee765527e63726bb1af984876e776, 523c881661dde67efb44fce38c8eed50a72a57c1, 71714a2cec6c6d79bbd425ad968f9d6a3e4a2066, 1948e4f85b855618b5b9a27265f98d816f4cb7cb, 63ba12b664a2cd3220ed43e22c717715f4cc2ae8, 7d4789b58761d9d48d9b5f5e7e0a510c3bbfb3af, f4f699790590bd0896c48a71e9232a65198f92f0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.