CVE-2026-64150

A flaw was found in the Netfilter component of the Linux kernel. In the nft_inner module, an error path incorrectly re-enables softirqs before releasing a local lock. This improper ordering of lock operations could lead to a race condition, potentially allowing a local attacker to cause a denial of service (DoS) or other undefined behavior.

This vulnerability is rated as having a Moderate impact for Red Hat Enterprise Linux because exploitation requires local access with the ability to configure nftables rules, limiting the threat scope primarily to a denial of service via system instability. The defect involves an improper synchronization sequence during netfilter inner header processing error recovery, which can trigger race conditions under concurrent execution. Earlier platform releases, including Red Hat Enterprise Linux 8 and 9, are unaffected because the underlying inner header matching capability was introduced in newer upstream kernel codebases.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.