https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 06:17:54 +0000 https://vulnerability.circl.lu/vuln/cve-2026-93288 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state</p> <p>sashiko reports: &#34;nfnl_log_net_exit() calls nf_log_unset(), which clears the logger pointer without an RCU grace period. Immediately after, ops_free_list() frees the per-net state while concurrent packets might still be executing nf_log_packet() under rcu_read_lock().&#34;</p> <p>Clear the pointer via .pre_exit to make sure rcu readers have completed before pernet storage is free&#39;d. The change in nf_log_syslog.c is only done for consistency: it doesn&#39;t use pernet data.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state</p> <p>sashiko reports: &#34;nfnl_log_net_exit() calls nf_log_unset(), which clears the logger pointer without an RCU grace period. Immediately after, ops_free_list() frees the per-net state while concurrent packets might still be executing nf_log_packet() under rcu_read_lock().&#34;</p> <p>Clear the pointer via .pre_exit to make sure rcu readers have completed before pernet storage is free&#39;d. The change in nf_log_syslog.c is only done for consistency: it doesn&#39;t use pernet data.</p> https://vulnerability.circl.lu/vuln/cve-2026-93288