First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2026-46324

HighCVSS 7.8/10Last modified Oct 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: use list_del_rcu for netlink hooks

nft_netdev_unregister_hooks and __nft_unregister_flowtable_net_hooks need to use list_del_rcu(), this list can be walked by concurrent dumpers.

Add a new helper and use it consistently.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Linux	Linux	>= f9a43007d3f7ba76d5e7f9421094f00f2ef202f8, < 6480ea533cedfbf79ea5a1f12c5f71d41484dd8a; >= f9a43007d3f7ba76d5e7f9421094f00f2ef202f8, < 2405730fde96f7fa483a5862e323b681e0e09f54; >= f9a43007d3f7ba76d5e7f9421094f00f2ef202f8, < fe45e203527af8a2c0dc4c8a7b56c09c74b796c8; >= f9a43007d3f7ba76d5e7f9421094f00f2ef202f8, < 0bd93ce4f3c35e845532184331d7917d7e562c80; >= f9a43007d3f7ba76d5e7f9421094f00f2ef202f8, < 0f33e8ad6ac563ae2233dd7f75884e0ee010521d; >= f9a43007d3f7ba76d5e7f9421094f00f2ef202f8, < f3224ee463f8f6f6ced7dcdf6081add4f8128527; c73955a09408e7374d9abfd0e78ce3de9cda0635; b09e6ccf0d12f9356e8e3508d3e3dce126298538; 3fac8ce48fa9fd61ee9056d3ed48b2edefca8b82; 9c413a8c8bb49cc16796371805ecb260e885bb2b; a3940dcf552f2393d1e8f263b386593f98abe829; 86c0154f4c3a56c5db8b9dd09e3ce885382c2c19; >= 4.19.316, < 4.20; >= 5.4.262, < 5.5; >= 5.10.198, < 5.11; >= 5.15.45, < 5.16; >= 5.17.13, < 5.18; >= 5.18.2, < 5.19
Linux	Linux	5.19

References

Timeline

Published: Jun 9, 2026
Last modified: Oct 30, 2026
NVD status: Modified

Related CVEs from 2026

CVE-2026-463259.8In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE The CVE-2026-463268.4In the Linux kernel, the following vulnerability has been resolved: iio: pressure: mprls0025pa: fix spi_transfer struct initialisation Mak CVE-2026-463277.8In the Linux kernel, the following vulnerability has been resolved: dm: fix unlocked test for dm_suspended_md The function dm_blk_report_z CVE-2026-463287.3In the Linux kernel, the following vulnerability has been resolved: apparmor: fix rlimit for posix cpu timers Posix cpu timers requires an CVE-2026-463295.5In the Linux kernel, the following vulnerability has been resolved: erofs: handle end of filesystem properly for file-backed mounts I/O re CVE-2026-46333.7A flaw was found in Keycloak. A remote attacker can exploit differential error messages during the identity-first login flow when Organizati CVE-2026-463307.8In the Linux kernel, the following vulnerability has been resolved: Revert "net/smc: Introduce TCP ULP support" This reverts commit d7cd42 CVE-2026-463317.8In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit partial COW leading to page cache corruption tcf_CVE-2026-463328.0In the Linux kernel, the following vulnerability has been resolved: greybus: gb-beagleplay: bound bootloader receive buffering cc1352_boot CVE-2026-463337.1In the Linux kernel, the following vulnerability has been resolved: ptrace: slightly saner 'get_dumpable()' logic The 'dumpability' of a t CVE-2026-463348.7OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Versions prior to 3.6.6 and 4.0.0-rc1 contain a denial of service vul CVE-2026-463367.1Manyfold is an open source, self-hosted web application for managing a collection of 3d models, particularly focused on 3d printing. From 0.