CVE-2026-98484

The Linux kernel contains a vulnerability in netfilter: nf_tables regarding how it handles catchall elements . A predicate drift exists because nft_setelem_catchall_insert() only checks if an element is active, while lookup and dump paths also check if the element is expired . This causes expired...

CVE-2026-98484 netfilter: nf_tables: skip expired catchall elements on insert and delete

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: skip expired catchall elements on insert and delete nftsetelemcatchallinsert looks up duplicates with nftsetelemactive only, while nftsetcatchalllookup and the dump path additionally skip expired elements. On...

EUVD-2026-103724

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: skip expired catchall elements on insert and delete nftsetelemcatchallinsert looks up duplicates with nftsetelemactive only, while nftsetcatchalllookup and the dump path additionally skip expired elements. On...