CVE-2026-23385 netfilter: nf_tables: clone set on flush only

🗓️ 25 Mar 2026 10:28:03Reported by GoogleType

osv

osv🔗 osv.dev👁 1 Views

Fix nf_tables clone on flush by restricting clone to flush set; add NFT_ITER_UPDATE_CLONE.

Reporter	Title	Published	Views	Family All 19
ATTACKERKB	CVE-2026-23385	25 Mar 202610:28	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-1596)	30 Apr 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-23385	25 Mar 202600:00	–	nessus
AstraLinux	Astra Linux - уязвимость в linux-5.10	20 May 202605:53	–	astralinux
Circl	CVE-2026-23385	25 Mar 202614:17	–	circl
CNNVD	Linux kernel 安全漏洞	25 Mar 202600:00	–	cnnvd
CVE	CVE-2026-23385	25 Mar 202610:28	–	cve
Cvelist	CVE-2026-23385 netfilter: nf_tables: clone set on flush only	25 Mar 202610:28	–	cvelist
Debian CVE	CVE-2026-23385	25 Mar 202610:28	–	debiancve
EUVD	EUVD-2026-15382	25 Mar 202612:30	–	euvd

Source	Link
git	www.git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
git	www.git.kernel.org/stable/c/9154945a6394029822bd08c24cef5a3f86d0424a
git	www.git.kernel.org/stable/c/b7f67282ca2be14b727dd698b50e10cf5d8c66f9
git	www.git.kernel.org/stable/c/fb7fb4016300ac622c964069e286dc83166a5d52
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23385.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-23385

02 Apr 2026 13:12Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.15.5

EPSS0.00017

netfilter nf tables clone set flush preparation NFT_ITER_UPDATE_CLONE