CVE-2026-64150

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-64150

Import Source

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2026-64150

Downstream

Published

2026-07-19T15:40:40.027Z

Modified

2026-07-22T03:31:38.649531711Z

Severity

9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

netfilter: nft_inner: release local_lock before re-enabling softirqs

Details

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nftinner: release locallock before re-enabling softirqs

Quoting sashiko: In the error path, localbhenable() is called before localunlocknested_bh().

Database specific

{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64150.json"
}

References

Affected packages

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

ba36fada9ab487634f61f92769c95bc148aa8f49

Fixed

df19b6af171695a1352314597c9a4311d48d5171

Fixed

6fecd39c6401134b58505bc4eb1adc8a0e2fe992

Fixed

a6cb3ff979855f7f0ee9450a947fe8f96c2ba37a

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-64150.json"

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-64150.json"