CVE-2026-64150Fallo crítico de seguridad en Linux Kernel Netfilter
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: release local_lock before re-enabling softirqs Quoting sashiko: In the error path, local_bh_enable() is called before local_unlock_nested_bh().
Ver en NVDAnálisis
A critical vulnerability was found in the Linux kernel netfilter subsystem involving improper locking logic during network packet processing. Given its CVSS 9.8 rating and its location in the core networking stack, this could lead to remote exploitation or system compromise on Linux-based servers.
Roles relevantes
Severidad
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HNVD-CWE-noinfoEPSS
Afecta
linux:linux_kernelDescripción técnica
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: release local_lock before re-enabling softirqs Quoting sashiko: In the error path, local_bh_enable() is called before local_unlock_nested_bh().