CVE-2026-90061

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the netfilter nf tables component where both the dynset and newsetelem paths perform a double clone of existing set expressions when setting set element expressions without provided override expressions. This occurs because the system clones the template set expressions and then clones them again on the new element. This behavior causes a module refcount imbalance in the connlimit expression, leading to a WARNING splat when defaulting to set expressions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.