CVE-2026-53264

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the net/sched component when NEWTFILTER and DELFILTER operations are executed concurrently. This occurs because an action can be freed immediately via kfree() while another CPU still holds a pointer to it, leading to a Use-After-Free (UAF) scenario. UAF is a memory corruption issue where a program continues to use a pointer after the memory it points to has been freed. The issue is triggered during the interaction between idr find() and idr remove() functions when managing the action lifecycle.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.