CVE-2026-72254

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference occurs in the netfilter nft fib component when a fib expression is used in a netdev egress base chain. This happens because the nft fib validate() function incorrectly validates the hook due to an enum alias where NF NETDEV EGRESS equals NF INET LOCAL IN. Consequently, an egress chain passes validation but subsequently faults during evaluation when it dereferences nft in(pkt), which is NULL on the transmit path.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.