Linux Kernel Vulnerability in Netfilter Module - Packet Handling Issue

CVE-2026-23391

What is CVE-2026-23391?

A vulnerability exists in the Linux kernel's netfilter module that impacts how packets are managed when a template is removed. This occurs during the enqueuing of packets, where references such as helpers may be disrupted upon module removal or when timeout policies are applied through nfnetlink_cttimeout. Proper handling is crucial to avoid issues with packet processing and ensure the integrity of communication. The incident necessitates flushing pending packets if the rule governing the template is deleted, maintaining system stability and performance.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References