CVE-2026-98792netfilter: flowtable: generalize pending status bit
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: generalize pending status bit Rename NF_FLOW_HW_PENDING to NF_FLOW_PENDING and use it to inhibit the flowtable GC worker until pending hw offload work has been completed. Apparently, nf_flow_offload_stats() can schedule work to retrieve stats while the flow is being removed by GC. And this bit can also be used in a follow up patch to disable GC until the flow has been fully added in both directions. Revert the reordering done in commit d644b23afe1e ("netfilter: flowtable: publish HW_DEAD after worker is done") to prevent a race between GC and hw offload handler.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 18, 2026
- First seen by InfoSec Signals
- Oct 18, 2026
Affected products
Linux Linux linux:linux (from the name) | from 2c8897953f3b2ff5498f3f275708a742bfcdbc24 before 4d52b72f3aa68ad0536444e36530bda75070194c; from 2c8897953f3b2ff5498f3f275708a742bfcdbc24 before 4033e1a9262c57dfbfc594a591a50fcba63c531a; from 2c8897953f3b2ff5498f3f275708a742bfcdbc24 before a2cac45848d1cf31ed190db30f90ba8211e9a8ca; from 2c8897953f3b2ff5498f3f275708a742bfcdbc24 before 7c549fb7eecd01fdba7c0d12c01da876ef8a3214 | CNA record |
References
- https://git.kernel.org/stable/c/4d52b72f3aa68ad0536444e36530bda75070194c
- https://git.kernel.org/stable/c/4033e1a9262c57dfbfc594a591a50fcba63c531a
- https://git.kernel.org/stable/c/a2cac45848d1cf31ed190db30f90ba8211e9a8ca
- https://git.kernel.org/stable/c/7c549fb7eecd01fdba7c0d12c01da876ef8a3214
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.