CVE-2026-74660

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A slab-use-after-free issue exists in the netfilter component of the Linux kernel. The ebt nflog frontend passes an explicit ULOG log type to the nf log packet() function without holding a reference to the selected logger module. This allows an ebtables nflog rule to remain callable while the nfnetlink log module is being unloaded. Consequently, a race condition occurs where the system may dereference per-net state after it has been freed by nfnetlink log fini(), specifically within the instance lookup get rcu() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.