CVE-2026-98851

A flaw was found in the Linux kernel's netfilter subsystem. In the flow offload component, an error handling failure during rule initialization fails to release an incremented flow table reference count. A local user with network administration privileges can exploit this by triggering failed rule additions, resulting in leaked references. Consequently, affected flow tables cannot be removed, leading to a local Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.