CVE-2026-98625

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the netfilter flowtable component. The flow offload work del() function sets the NF FLOW HW DEAD flag before the work handler clears NF FLOW HW PENDING. Because the offload worker does not hold an RCU read lock or a reference to the flow, a concurrent garbage collection process may free the flow object if the worker is preempted after marking it as dead. This allows the RCU callback to free the memory while the worker is still active, leading to a use-after-free condition when the worker resumes to clear the pending bit.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.