Linux Kernel Netfilter Vulnerability Affecting Pending Catchall Elements

CVE-2026-23278

What is CVE-2026-23278?

The Linux kernel has a vulnerability in the netfilter module that affects how pending catchall elements are managed during transaction processing. This issue arises when there is one active and one pending catchall element. The system must correctly handle these elements to prevent potential instability. Failure to do so can lead to improper resource handling and system warnings, signaling issues during the lifecycle of netfilter operations. Addressing this vulnerability is critical to ensure the integrity and reliability of transaction processing within the Linux network stack.

References