A vulnerability marked as critical has been reported in Linux Kernel up to 7.0-rc4. Impacted is the function synchronize_rcu of the component nf_tables. The manipulation leads to use after free. This vulnerability is referenced as CVE-2026-23392. The attack needs to be initiated within the local network. No exploit is available. It is suggested to upgrade the affected component.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | 3b49e2e94e6ebb8b23d0955d9e898254455734f8, 3b49e2e94e6ebb8b23d0955d9e898254455734f8, 3b49e2e94e6ebb8b23d0955d9e898254455734f8, 3b49e2e94e6ebb8b23d0955d9e898254455734f8, 3b49e2e94e6ebb8b23d0955d9e898254455734f8, 3b49e2e94e6ebb8b23d0955d9e898254455734f8, 4.16, 7.0-rc4 |
Updated description with critical severity, added affected version 7.0-rc4, and noted that no exploit is available.
Initial creation
