Linux Kernel Vulnerability Affecting Netfilter Functionality

CVE-2026-43454

What is CVE-2026-43454?

A vulnerability in the Linux kernel affects the netfilter subsystem, where duplicate device registrations during NETDEV_REGISTER notifications can lead to unforeseen issues. The vulnerability arises when a device that has already been registered by nft_netdev_hook_alloc() is inadvertently registered again, potentially compromising the integrity of network operations. A fix has been implemented to ensure that duplicate device handling is properly managed, thus reinforcing the security and stability of the kernel's networking capabilities.

References