CVE-2026-98792

UNKNOWN 0.0

netfilter: flowtable: generalize pending status bit

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: generalize pending status bit Rename NF_FLOW_HW_PENDING to NF_FLOW_PENDING and use it to inhibit the flowtable GC worker until pending hw offload work has been completed. Apparently, nf_flow_offload_stats() can schedule work to retrieve stats while the flow is being removed by GC. And this bit can also be used in a follow up patch to disable GC until the flow has been fully added in both directions. Revert the reordering done in commit d644b23afe1e ("netfilter: flowtable: publish HW_DEAD after worker is done") to prevent a race between GC and hw offload handler.

Vendor	linux
Product	linux
Ecosystems	Linux Kernel
Industries	Technology
Published	Oct 18, 2026

Stay Ahead of the Next One

Get instant alerts for linux linux

Be the first to know when new unknown vulnerabilities affecting linux linux are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Linux / Linux

2c8897953f3b2ff5498f3f275708a742bfcdbc24 < 4d52b72f3aa68ad0536444e36530bda75070194c 2c8897953f3b2ff5498f3f275708a742bfcdbc24 < 4033e1a9262c57dfbfc594a591a50fcba63c531a 2c8897953f3b2ff5498f3f275708a742bfcdbc24 < a2cac45848d1cf31ed190db30f90ba8211e9a8ca 2c8897953f3b2ff5498f3f275708a742bfcdbc24 < 7c549fb7eecd01fdba7c0d12c01da876ef8a3214

Linux / Linux

5.7

References

NVD ↗ CVE.org ↗ EPSS Data ↗

git.kernel.org: https://git.kernel.org/stable/c/4d52b72f3aa68ad0536444e36530bda75070194c git.kernel.org: https://git.kernel.org/stable/c/4033e1a9262c57dfbfc594a591a50fcba63c531a git.kernel.org: https://git.kernel.org/stable/c/a2cac45848d1cf31ed190db30f90ba8211e9a8ca git.kernel.org: https://git.kernel.org/stable/c/7c549fb7eecd01fdba7c0d12c01da876ef8a3214