CVE-2026-45897

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the netfilter nft counter component where concurrent dump-and-reset operations can lead to value underrunning. This occurs because parallel resets may read the same counter values and subsequently subtract them multiple times. To resolve this, a global static spinlock is implemented to serialize the fetch and reset operations, ensuring the lock is acquired before the total is fetched.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.