Use-After-Free Vulnerability in Linux Kernel Affects Networking Components

CVE-2026-52912

What is CVE-2026-52912?

A use-after-free vulnerability exists in the Linux kernel's netfilter component. When packets are queued in a bridge environment, the device referenced in the skb (socket buffer) structure can point to a freed bridge master due to improper management of skb->dev references. This occurs when bridge packets are re-injected into the network stack, potentially allowing an attacker to manipulate the packet processing path. The vulnerability has been addressed by ensuring that the reference to skb->dev is retained through the lifecycle of the queue, thus preventing access to freed memory during packet dropping and reinjection processes.

References