CVE-2026-52988

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase Publish new hooks in the list into the basechain/flowtable using splice_list_rcu() to ensure netlink dump list traversal via rcu is safe while concurrent ruleset update is going on.

CVSS v3 7.1 HIGH

7.1^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://git.kernel.org/stable/c/00e370627f2e1fb3585f9d26348b1abddc75442b
https://git.kernel.org/stable/c/1346be9379639c30877083b12747d4eacb83c24f	Patch
https://git.kernel.org/stable/c/28ecfb3d1fe8dea70319de7051cb6718c25b5b52
https://git.kernel.org/stable/c/5593c640f9daedec8de61555c41e1019fa675aa6
https://git.kernel.org/stable/c/8fdd2204503ab1ce07dc000c277e2c3edf96a67b
https://git.kernel.org/stable/c/a557816c6e38e9473d99aa9ea8c662f55fc85847
https://git.kernel.org/stable/c/a6134e62dba2ea4f760b29d5226907f447c92400	Patch
https://git.kernel.org/stable/c/ed8d3bd8272e49ea987100de2abfb13710329a9b

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel:7.1:rc1::::::

History

19 Oct 2026, 20:18

Type	Values Removed	Values Added
CWE		CWE-362

03 Oct 2026, 11:17

Type	Values Removed	Values Added
References		() https://git.kernel.org/stable/c/00e370627f2e1fb3585f9d26348b1abddc75442b - () https://git.kernel.org/stable/c/28ecfb3d1fe8dea70319de7051cb6718c25b5b52 - () https://git.kernel.org/stable/c/5593c640f9daedec8de61555c41e1019fa675aa6 - () https://git.kernel.org/stable/c/8fdd2204503ab1ce07dc000c277e2c3edf96a67b - () https://git.kernel.org/stable/c/a557816c6e38e9473d99aa9ea8c662f55fc85847 - () https://git.kernel.org/stable/c/ed8d3bd8272e49ea987100de2abfb13710329a9b -

Information

Published : 2026-06-24 17:17

Updated : 2026-10-19 20:18

NVD link : CVE-2026-52988

Mitre link : CVE-2026-52988

CVE.ORG link : CVE-2026-52988

JSON object : View

Products Affected

linux

linux_kernel

CWE

NVD-CWE-noinfo CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

{"id": "CVE-2026-52988", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-52988", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-16T15:24:11.399025Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.1, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 1.8}]}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "78d9f48f7f44431a25da2b46b3a8812f6ff2b981", "lessThan": "ed8d3bd8272e49ea987100de2abfb13710329a9b", "versionType": "git"}, {"status": "affected", "version": "78d9f48f7f44431a25da2b46b3a8812f6ff2b981", "lessThan": "8fdd2204503ab1ce07dc000c277e2c3edf96a67b", "versionType": "git"}, {"status": "affected", "version": "78d9f48f7f44431a25da2b46b3a8812f6ff2b981", "lessThan": "5593c640f9daedec8de61555c41e1019fa675aa6", "versionType": "git"}, {"status": "affected", "version": "78d9f48f7f44431a25da2b46b3a8812f6ff2b981", "lessThan": "00e370627f2e1fb3585f9d26348b1abddc75442b", "versionType": "git"}, {"status": "affected", "version": "78d9f48f7f44431a25da2b46b3a8812f6ff2b981", "lessThan": "28ecfb3d1fe8dea70319de7051cb6718c25b5b52", "versionType": "git"}, {"status": "affected", "version": "78d9f48f7f44431a25da2b46b3a8812f6ff2b981", "lessThan": "a557816c6e38e9473d99aa9ea8c662f55fc85847", "versionType": "git"}, {"status": "affected", "version": "78d9f48f7f44431a25da2b46b3a8812f6ff2b981", "lessThan": "1346be9379639c30877083b12747d4eacb83c24f", "versionType": "git"}, {"status": "affected", "version": "78d9f48f7f44431a25da2b46b3a8812f6ff2b981", "lessThan": "a6134e62dba2ea4f760b29d5226907f447c92400", "versionType": "git"}], "programFiles": ["net/netfilter/nf_tables_api.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5.8"}, {"status": "unaffected", "version": "0", "lessThan": "5.8", "versionType": "semver"}, {"status": "unaffected", "version": "5.10.271", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.222", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.189", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.158", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.112", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.55", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "7.0.10", "versionType": "semver", "lessThanOrEqual": "7.0.*"}, {"status": "unaffected", "version": "7.1", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["net/netfilter/nf_tables_api.c"], "defaultStatus": "affected"}]}], "published": "2026-06-24T17:17:09.610", "references": [{"url": "https://git.kernel.org/stable/c/00e370627f2e1fb3585f9d26348b1abddc75442b", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/1346be9379639c30877083b12747d4eacb83c24f", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/28ecfb3d1fe8dea70319de7051cb6718c25b5b52", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/5593c640f9daedec8de61555c41e1019fa675aa6", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/8fdd2204503ab1ce07dc000c277e2c3edf96a67b", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/a557816c6e38e9473d99aa9ea8c662f55fc85847", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/a6134e62dba2ea4f760b29d5226907f447c92400", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/ed8d3bd8272e49ea987100de2abfb13710329a9b", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-362"}]}], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: join hook list via splice_list_rcu() in commit phase\n\nPublish new hooks in the list into the basechain/flowtable using\nsplice_list_rcu() to ensure netlink dump list traversal via rcu is safe\nwhile concurrent ruleset update is going on."}], "lastModified": "2026-10-19T20:18:53.410", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8CFA07AA-D66B-487A-8025-9AA0EDAD870F", "versionEndExcluding": "7.0.10", "versionStartIncluding": "5.8"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B1EF7059-E670-45F4-B422-54C40FA86390"}], "operator": "OR"}]}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}