CVE-2026-23412

A flaw was found in the Linux kernel's netfilter BPF (Berkeley Packet Filter) component. A local attacker could exploit this by initiating a concurrent process to dump hooks via nfnetlink_hooks, which triggers a use-after-free vulnerability. This could lead to system instability or a denial of service (DoS) condition.

Hook memory could be freed while nfnl_hook_dump_one still ran under concurrent netlink dump, causing a slab UAF. Setting up the race requires use of netfilter netlink hook APIs, which need elevated capability (typically CAP_NET_ADMIN) in practice. Impact is at least denial of service; any broader memory-corruption outcome should be confirmed by manual review.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.