CVE-2026-90062

HighCVSS 7.1/10Last modified Oct 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: move hardware offload step after building the chain blob

Allocate the chain blob before the ruleset offload to reduce chances of entering an inconsistent state where the offloaded ruleset in the nic and the software ruleset differ.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= c9626a2cbdb20e26587b3fad99960520a023432b, < 923f824f30faebc5560c3061a595063cecdbdbb8; >= c9626a2cbdb20e26587b3fad99960520a023432b, < 6e7ad6e69be4751ab2476042c70c600bdaa8d4f2; >= c9626a2cbdb20e26587b3fad99960520a023432b, < 309acbab74e46114246bf4346c9b60b3d8cb4fcd; >= c9626a2cbdb20e26587b3fad99960520a023432b, < 79eafe22ab0a650996da2b3e5d94a12c3e16f3aa; >= c9626a2cbdb20e26587b3fad99960520a023432b, < 52febaf1d311d6ede312b2ec7692a309714f9554; >= c9626a2cbdb20e26587b3fad99960520a023432b, < d5497644329d3a01e951aba76561bbd883ff6b0c; >= c9626a2cbdb20e26587b3fad99960520a023432b, < 6a7d3b074cfbb64513f5f92d60ab1b216ae98076; >= c9626a2cbdb20e26587b3fad99960520a023432b, < b1881d362e1924b66f6016c3efd28807032b41bf
LinuxLinux5.3

References

Timeline

Published
Sep 17, 2026
Last modified
Oct 19, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-90063In the Linux kernel, the following vulnerability has been resolved: virtio-net: Ensure that TCP packets don't overflow gso_segs The user cCVE-2026-90064In the Linux kernel, the following vulnerability has been resolved: drm/xe: Reject page faults from non-fault-mode scratch VMs Having scraCVE-2026-90065In the Linux kernel, the following vulnerability has been resolved: net/smc: release the internal TCP sock on IPPROTO_SMC socket creation fCVE-2026-90066In the Linux kernel, the following vulnerability has been resolved: samples/ftrace: Fix kthread_stop() on ERR_PTR in ftrace-direct-multi-moCVE-2026-900677.5In the Linux kernel, the following vulnerability has been resolved: libceph: validate banner payload length When parsing the Ceph messengeCVE-2026-90068In the Linux kernel, the following vulnerability has been resolved: ASoC: dapm: Fix off-by-one check on the second enum channel The snd_soCVE-2026-900697.8In the Linux kernel, the following vulnerability has been resolved: crypto: acomp - allocate async request context when cloning ACOMP_REQUCVE-2026-90075.5Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in HCL Notes from HCL Software allows refCVE-2026-90070In the Linux kernel, the following vulnerability has been resolved: tpm: st33zp24: Return zero on status read failure st33zp24_status() igCVE-2026-900717.8In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_teql: restore skb->dev on the slave failure path teql_mCVE-2026-90072In the Linux kernel, the following vulnerability has been resolved: net/sched: sfq: clamp quantum to avoid signed overflow soft lockup sfqCVE-2026-90073In the Linux kernel, the following vulnerability has been resolved: net/sched: hhf: clamp quantum before hhf_change() to avoid overflow hh
CVE-2026-90062: High severity, CVSS 7.1 | Vulnix