CVE-2026-52912 netfilter: nf_queue: hold bridge skb->dev while queued

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfqueue: hold bridge skb-dev while queued brpassframeup rewrites skb-dev from the ingress port to the bridge master before queueing bridge LOCALIN packets. NFQUEUE only holds references on state.in/out and bridge...

SUSE CVE-2026-43024

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: reject immediate NFQUEUE verdict nftqueue is always used from userspace nftables to deliver the NFQUEUE verdict. Immediately emitting an NFQUEUE verdict is never used by the userspace nft tools, so reject...

CVE-2026-43024

A flaw was found in the Linux kernel's netfilter nftables component. This vulnerability arises from the system allowing immediate NFQUEUE verdicts, which are not intended for use by userspace nft tools. This could lead to unexpected behavior or a bypass of intended network filtering rules,...

CVE-2026-43024

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: reject immediate NFQUEUE verdict nftqueue is always used from userspace nftables to deliver the NFQUEUE verdict. Immediately emitting an NFQUEUE verdict is never used by the userspace nft tools, so reject...

CVE-2026-43024

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: reject immediate NFQUEUE verdict nftqueue is always used from userspace nftables to deliver the NFQUEUE verdict. Immediately emitting an NFQUEUE verdict is never used by the userspace nft tools, so reject...

PT-2026-36441

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter nf tables component where immediate NF QUEUE verdicts could be emitted. While nft queue is intended for userspace nftables to deliver verdicts, immediate...

DEBIAN-CVE-2022-48911

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfqueue: fix possible use-after-free Eric Dumazet says: The sockhold side seems suspect, because there is no guarantee that skrefcnt is not already 0. On failure, we cannot queue the packet and need to indicate an erro...

PT-2022-29044

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.27 Description The issue is related to a possible use-after-free in the netfilter nf queue. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

PT-2022-29104

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.104 Description The issue is related to a possible use-after-free in the netfilter nf queue. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions pri...

PT-2022-29214

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.305 Description The issue is related to a possible use-after-free in the netfilter nf queue. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

PT-2022-28975

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.13 Description The issue is related to a possible use-after-free in the netfilter nf queue. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

PT-2022-29148

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.183 Description A potential issue exists in the netfilter nf queue component, which may lead to a use-after-free scenario. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2022-29173

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.233 Description The issue is related to a possible use-after-free in the netfilter nf queue. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions pri...

PT-2022-29194

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.270 Description The issue is related to a possible use-after-free in the netfilter nf queue. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions pri...