https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 12:09:02 +0000 https://vulnerability.circl.lu/vuln/cve-2026-23278 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>netfilter: nf_tables: always walk all pending catchall elements</p> <p>During transaction processing we might have more than one catchall element: 1 live catchall element and 1 pending element that is coming as part of the new batch.</p> <p>If the map holding the catchall elements is also going away, its required to toggle all catchall elements and not just the first viable candidate.</p> <p>Otherwise, we get: WARNING: ./include/net/netfilter/nf_tables.h:1281 at nft_data_release+0xb7/0xe0 [nf_tables], CPU#2: nft/1404 RIP: 0010:nft_data_release+0xb7/0xe0 [nf_tables] [..] __nft_set_elem_destroy+0x106/0x380 [nf_tables] nf_tables_abort_release+0x348/0x8d0 [nf_tables] nf_tables_abort+0xcf2/0x3ac0 [nf_tables] nfnetlink_rcv_batch+0x9c9/0x20e0 [..]</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>netfilter: nf_tables: always walk all pending catchall elements</p> <p>During transaction processing we might have more than one catchall element: 1 live catchall element and 1 pending element that is coming as part of the new batch.</p> <p>If the map holding the catchall elements is also going away, its required to toggle all catchall elements and not just the first viable candidate.</p> <p>Otherwise, we get: WARNING: ./include/net/netfilter/nf_tables.h:1281 at nft_data_release+0xb7/0xe0 [nf_tables], CPU#2: nft/1404 RIP: 0010:nft_data_release+0xb7/0xe0 [nf_tables] [..] __nft_set_elem_destroy+0x106/0x380 [nf_tables] nf_tables_abort_release+0x348/0x8d0 [nf_tables] nf_tables_abort+0xcf2/0x3ac0 [nf_tables] nfnetlink_rcv_batch+0x9c9/0x20e0 [..]</p> https://vulnerability.circl.lu/vuln/cve-2026-23278