CVE-2026-90062
Full vulnerability record from the local CVENow database.
Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: move hardware offload step after building the chain blob Allocate the chain blob before the ruleset offload to reduce chances of entering an inconsistent state where the offloaded ruleset in the nic and the software ruleset differ.
Severity
HIGH
CVSS score
7.1
(v3.1)
Vulnerability status
Received
Source identifier
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Published
2026-09-17 17:16:54.943000
Last modified
2026-10-19 09:18:54.620000
View original CVE JSON
{
"id": "CVE-2026-90062",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2026-09-17T17:16:54.943",
"lastModified": "2026-10-19T09:18:54.620",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: move hardware offload step after building the chain blob\n\nAllocate the chain blob before the ruleset offload to reduce chances of\nentering an inconsistent state where the offloaded ruleset in the nic\nand the software ruleset differ."
}
],
"affected": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"affectedData": [
{
"vendor": "Linux",
"product": "Linux",
"defaultStatus": "unaffected",
"programFiles": [
"net/netfilter/nf_tables_api.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"versions": [
{
"version": "c9626a2cbdb20e26587b3fad99960520a023432b",
"lessThan": "923f824f30faebc5560c3061a595063cecdbdbb8",
"versionType": "git",
"status": "affected"
},
{
"version": "c9626a2cbdb20e26587b3fad99960520a023432b",
"lessThan": "6e7ad6e69be4751ab2476042c70c600bdaa8d4f2",
"versionType": "git",
"status": "affected"
},
{
"version": "c9626a2cbdb20e26587b3fad99960520a023432b",
"lessThan": "309acbab74e46114246bf4346c9b60b3d8cb4fcd",
"versionType": "git",
"status": "affected"
},
{
"version": "c9626a2cbdb20e26587b3fad99960520a023432b",
"lessThan": "79eafe22ab0a650996da2b3e5d94a12c3e16f3aa",
"versionType": "git",
"status": "affected"
},
{
"version": "c9626a2cbdb20e26587b3fad99960520a023432b",
"lessThan": "52febaf1d311d6ede312b2ec7692a309714f9554",
"versionType": "git",
"status": "affected"
},
{
"version": "c9626a2cbdb20e26587b3fad99960520a023432b",
"lessThan": "d5497644329d3a01e951aba76561bbd883ff6b0c",
"versionType": "git",
"status": "affected"
},
{
"version": "c9626a2cbdb20e26587b3fad99960520a023432b",
"lessThan": "6a7d3b074cfbb64513f5f92d60ab1b216ae98076",
"versionType": "git",
"status": "affected"
},
{
"version": "c9626a2cbdb20e26587b3fad99960520a023432b",
"lessThan": "b1881d362e1924b66f6016c3efd28807032b41bf",
"versionType": "git",
"status": "affected"
}
]
},
{
"vendor": "Linux",
"product": "Linux",
"defaultStatus": "affected",
"programFiles": [
"net/netfilter/nf_tables_api.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"versions": [
{
"version": "5.3",
"status": "affected"
},
{
"version": "0",
"lessThan": "5.3",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "5.10.270",
"lessThanOrEqual": "5.10.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "5.15.221",
"lessThanOrEqual": "5.15.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.1.188",
"lessThanOrEqual": "6.1.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.6.157",
"lessThanOrEqual": "6.6.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.12.110",
"lessThanOrEqual": "6.12.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.18.52",
"lessThanOrEqual": "6.18.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "7.2.6",
"lessThanOrEqual": "7.2.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "7.3",
"lessThanOrEqual": "*",
"versionType": "original_commit_for_fix",
"status": "unaffected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.2
}
]
},
"references": [
{
"url": "https://git.kernel.org/stable/c/309acbab74e46114246bf4346c9b60b3d8cb4fcd",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/52febaf1d311d6ede312b2ec7692a309714f9554",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/6a7d3b074cfbb64513f5f92d60ab1b216ae98076",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/6e7ad6e69be4751ab2476042c70c600bdaa8d4f2",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/79eafe22ab0a650996da2b3e5d94a12c3e16f3aa",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/923f824f30faebc5560c3061a595063cecdbdbb8",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/b1881d362e1924b66f6016c3efd28807032b41bf",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/d5497644329d3a01e951aba76561bbd883ff6b0c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}
]
}