AZL-96509
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-96509.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-96509
- Upstream
- Published
- 2026-08-15T13:18:02Z
- Modified
- 2026-09-01T05:28:09Z
- Summary
- CVE-2026-74565 affecting package kernel 6.6.150.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nftables: make nftobject rhltable per table
The nftobject rhltable is global, this allows for accessing objects that are being dismangled from lookup path by other existing netns. Given the nftobjdestroy() releases the object inmediately, this might lead to use-after-free of these objects that are being released. Make the existing rhltable per table to address this issue to deal with with the nftrcvnlevent() path too.
Update nftobjlookup() to take the table as non-const, otherwise, compiler complains when passing the objnameht to rhltablelookup().
- References