CVE-2026-64150Critical security flaw in Linux Kernel Netfilter
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: release local_lock before re-enabling softirqs Quoting sashiko: In the error path, local_bh_enable() is called before local_unlock_nested_bh().
View on NVDAnalysis
A critical vulnerability was found in the Linux kernel netfilter subsystem involving improper locking logic during network packet processing. Given its CVSS 9.8 rating and its location in the core networking stack, this could lead to remote exploitation or system compromise on Linux-based servers.
Relevant roles
Severity
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HNVD-CWE-noinfoEPSS
Affects
linux:linux_kernelTechnical description
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: release local_lock before re-enabling softirqs Quoting sashiko: In the error path, local_bh_enable() is called before local_unlock_nested_bh().