Threats Tagged 'cve-2026-53269'

A race condition vulnerability in the Linux kernel's netfilter synproxy infrastructure has been resolved by adding a mutex to guard hook reference counting. The issue occurred because netfilter hooks are registered on-demand when the first iptables target or nftables expression is added, and concurrent operations could race each other. The fix introduces a mutex to serialize access to the reference count control blocks, preventing race conditions.

In the Linux kernel, the following vulnerability has been resolved: netfilter: synproxy: add mutex to guard hook reference counting As the synproxy infrastructure register netfilter hooks on-demand when a user adds the first iptables target or nftables expression, if done concurrently they can race each other. Introduce a mutex to serialize the refcount control blocks access from both frontends. While a per namespace mutex might be more efficient, it is not needed for target/expression like SYNPROXY.