CVE-2026-23392

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains an issue where a flowtable is not properly released after an error, potentially leading to a use-after-free condition. This can occur when unregistering hooks from an error path, specifically when a hook already refers to the flowtable and is exposed to the packet path or the nfnetlink hook control plane. The error path is rare, typically occurring when reaching the maximum number of hooks or failing to set up hardware offload. The issue was uncovered by KASAN reporting a use-after-free from the nfnetlink hook path during hook dumping.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.