CVE-2026-53269

The CVE affects the Linux kernel netfilter synproxy subsystem. The issue arises when netfilter hooks are registered on-demand for the first iptables target or nftables expression and multiple threads concurrently attempt registration, risking a race in refcount management. The published fix intro...

EUVD-2026-39220

In the Linux kernel, the following vulnerability has been resolved: netfilter: synproxy: add mutex to guard hook reference counting As the synproxy infrastructure register netfilter hooks on-demand when a user adds the first iptables target or nftables expression, if done concurrently they can ra...