CVE-2026-98484

A flaw was found in the Linux kernel's netfilter subsystem. A local user with network administration privileges can exploit this issue to cause a security bypass or Denial of Service (DoS). Due to improper handling of expired catchall set elements during insertion and deletion operations, stale entries are not properly ignored before background cleanup runs. This flaw can block the addition of new firewall rules or deactivate valid rules, causing network traffic to bypass intended filtering policies.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.