CVE-2026-74624

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A deadlock can occur in the netfilter nf conntrack component when TCP and SCTP conntrack paths emit invalid-packet logs while the ct->lock is still held. If invalid logging is routed to nfnetlink log and conntrack export is enabled, the log path may re-enter the conntrack netlink glue and attempt to dump the same conntrack. Because protocol attribute dumping may require ct->lock, this sequence leads to a deadlock. The issue is addressed by deferring logs in the nf ct l4proto log invalid() function, storing minimal context while the lock is held, and emitting the log only after unlocking.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.