Linux Kernel Vulnerability in Netfilter Components

CVE-2026-43060

What is CVE-2026-43060?

A network handling vulnerability in the Linux kernel's netfilter component can lead to issues where packets waiting in the nfqueue retain references to transient objects. These objects, such as connection tracking templates and timeout policies, could be invalidated upon module removal, resulting in a potential mishap due to stale references. This vulnerability necessitates immediate dropping of enqueued packets to prevent the system from interacting with non-existent objects. Future refinements may address more granular control over which packets should be discarded based on their dependencies.

References