CVE-2026-74565

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the netfilter nf tables component. The nft object rhltable is global, which allows other network namespaces to access objects that are being removed from the lookup path. Because the nft obj destroy() function releases objects immediately, this can lead to a use-after-free condition. The issue also affects the nft rcv nl event() path. To resolve this, the nft object rhltable must be made per table, and the nft obj lookup() function must be updated to accept the table as non-const to allow proper interaction with rhltable lookup().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.