https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 03:37:16 +0000 https://vulnerability.circl.lu/vuln/cve-2026-72320 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>netfilter: nft_lookup: fix catchall element handling with inverted lookups</p> <p>nft_lookup_eval() decides whether a lookup matched (`found`) from the direct set lookup and priv-&gt;invert before falling back to the catchall element used by interval sets (e.g. nft_set_rbtree) for the open-ended default range. Since `found` is never recomputed after `ext` is replaced by the catchall lookup, inverted lookups (NFT_LOOKUP_F_INV, &#34;!= @set&#34;) can wrongly match or wrongly skip the catchall element, producing the wrong verdict. Fold the catchall lookup into `ext` before computing `found`, matching the order already used by nft_objref_map_eval().</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>netfilter: nft_lookup: fix catchall element handling with inverted lookups</p> <p>nft_lookup_eval() decides whether a lookup matched (`found`) from the direct set lookup and priv-&gt;invert before falling back to the catchall element used by interval sets (e.g. nft_set_rbtree) for the open-ended default range. Since `found` is never recomputed after `ext` is replaced by the catchall lookup, inverted lookups (NFT_LOOKUP_F_INV, &#34;!= @set&#34;) can wrongly match or wrongly skip the catchall element, producing the wrong verdict. Fold the catchall lookup into `ext` before computing `found`, matching the order already used by nft_objref_map_eval().</p> https://vulnerability.circl.lu/vuln/cve-2026-72320