Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2026-64150

Опубликовано: 19 июл. 2026
Источник: redhat
CVSS3: 5.5
EPSS Низкий

Описание

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: release local_lock before re-enabling softirqs Quoting sashiko: In the error path, local_bh_enable() is called before local_unlock_nested_bh().

A flaw was found in the Netfilter component of the Linux kernel. In the nft_inner module, an error path incorrectly re-enables softirqs before releasing a local lock. This improper ordering of lock operations could lead to a race condition, potentially allowing a local attacker to cause a denial of service (DoS) or other undefined behavior.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 10kernelFix deferred
Red Hat Enterprise Linux 6kernelNot affected
Red Hat Enterprise Linux 7kernelNot affected
Red Hat Enterprise Linux 7kernel-rtNot affected
Red Hat Enterprise Linux 8kernelNot affected
Red Hat Enterprise Linux 8kernel-rtNot affected
Red Hat Enterprise Linux 9kernelNot affected
Red Hat Enterprise Linux 9kernel-rtNot affected

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-821
https://bugzilla.redhat.com/show_bug.cgi?id=2502549kernel: netfilter: nft_inner: release local_lock before re-enabling softirqs

EPSS

Процентиль: 36%
0.00442
Низкий

5.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 9.8
ubuntu
14 дней назад

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: release local_lock before re-enabling softirqs Quoting sashiko: In the error path, local_bh_enable() is called before local_unlock_nested_bh().

CVSS3: 9.8
nvd
14 дней назад

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: release local_lock before re-enabling softirqs Quoting sashiko: In the error path, local_bh_enable() is called before local_unlock_nested_bh().

CVSS3: 9.8
debian
14 дней назад

In the Linux kernel, the following vulnerability has been resolved: n ...

CVSS3: 9.8
github
14 дней назад

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: release local_lock before re-enabling softirqs Quoting sashiko: In the error path, local_bh_enable() is called before local_unlock_nested_bh().

EPSS

Процентиль: 36%
0.00442
Низкий

5.5 Medium

CVSS3

Уязвимость CVE-2026-64150