CVE-2026-23111-nftables-lab

CVE-2026-23111 nftables LPE: exposure check and safe lab Defensive tooling and a reproducible virtual-machine lab for CVE-2026-23111, the nftables use-after-free local privilege escalation in the Linux kernel an inverted element-activity check in nftmapcatchallactivate, the "off by !" bug. An...

CVE-2026-23111

CVE-2026-23111 Auditor Linux Kernel nftables UAF This repository contains an automated audit script in Bash designed to deeply and accurately evaluate the CVE-2026-23111 vulnerability in Linux environments. 🔍 What is the CVE-2026-23111 vulnerability? CVE-2026-23111 is a Use-After-Free UAF...

kernel: Kernel: Privilege escalation or denial of service in nf_tables via inverted element activity check

A flaw was found in the Linux kernel's nftables component. A logic bug in nftmapcatchallactivate causes an inverted element activity check during the abort path of a failed transaction. This can lead to a use-after-free vulnerability, as catchall verdict elements may still reference a freed chain...