CVE-2026-98484

The Linux kernel contains a vulnerability in netfilter: nf_tables regarding how it handles catchall elements . A predicate drift exists because nft_setelem_catchall_insert() only checks if an element is active, while lookup and dump paths also check if the element is expired . This causes expired...