Threats Tagged 'cve-2026-23412'

A use-after-free vulnerability in the Linux kernel's netfilter BPF subsystem was resolved by deferring hook memory release until concurrent RCU readers have completed. This flaw could lead to memory corruption and potentially allow privilege escalation or system compromise. The vulnerability affects multiple Linux kernel versions prior to 6.8.0-1064.72 and related builds. A high-severity CVSS score of 7.8 reflects the significant impact on confidentiality, integrity, and availability. The issue has been patched in updated kernel versions, and users are advised to apply these updates and reboot their systems. The vendor advisory confirms the availability of fixes and notes an ABI change requiring recompilation of third-party kernel modules. No known exploits are reported in the wild at this time.