CVE-2026-46319

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A Use-After-Free (UAF) issue exists in the act ct component of the Linux kernel. The problem occurs in the tcf ct flow table get() function when looking up a flow table. The function rhashtable lookup fast() opens and closes an RCU read critical section before returning the ct ft object. Because the RCU read lock is released before refcount inc not zero() is called on the returned object, a race window is created. During this window, tcf ct flow table cleanup work() can execute and free the ct ft object via kfree(), leading to a UAF. This condition can potentially result in privilege escalation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.