CVE-2026-89488

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the openvswitch component of the Linux kernel. The problem occurs because packet processing utilizes the Connection Tracking (CT) limit state under Read-Copy-Update (RCU), while the network namespace (netns) teardown frees that state under ovs mutex. Since the CT limit pointer was not removed from readers or protected by a grace period, packet processing could dereference the freed state. An unprivileged user can trigger this bug from a user and network namespace, leading to a slab-use-after-free in the ovs ct execute() function during netns teardown.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.