CVE-2026-52988

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-52988
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-52988.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-52988
Downstream
AZL (1)
BELL (1)
CGA (104)
DEBIAN (1)
OESA (1)
openSUSE (1)
ROOT (5)
SUSE (11)
UBUNTU (1)
Related
openSUSE (1)
SUSE (11)
Published
2026-06-24T16:29:02Z
Modified
2026-10-16T02:32:58Z
Severity
  • 7.1 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H CVSS Calculator
Summary
netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase
Details

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase

Publish new hooks in the list into the basechain/flowtable using splice_list_rcu() to ensure netlink dump list traversal via rcu is safe while concurrent ruleset update is going on.

Database specific 
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/52xxx/CVE-2026-52988.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
78d9f48f7f44431a25da2b46b3a8812f6ff2b981
Fixed
ed8d3bd8272e49ea987100de2abfb13710329a9b
Fixed
8fdd2204503ab1ce07dc000c277e2c3edf96a67b
Fixed
5593c640f9daedec8de61555c41e1019fa675aa6
Fixed
00e370627f2e1fb3585f9d26348b1abddc75442b
Fixed
28ecfb3d1fe8dea70319de7051cb6718c25b5b52
Fixed
a557816c6e38e9473d99aa9ea8c662f55fc85847
Fixed
1346be9379639c30877083b12747d4eacb83c24f
Fixed
a6134e62dba2ea4f760b29d5226907f447c92400

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-52988.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.8.0
Fixed
5.10.271
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.222
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.189
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.158
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.112
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.55
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.0.10

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-52988.json"