Vulnerability · Published Oct 6, 2026 · Assigned by Linux

CVE-2026-98320netfilter: flowtable: hold reference on ct until flow is released

High 7.8

In plain English

A high-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 3% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.1%top 96.7% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: hold reference on ct until flow is released nf_ct_put() releases the ct->ext area inmediately, the rcu typesafe semantics also allow to refer to the wrong conntrack from the flowtable datapath. Hold reference on ct until flow is released after rcu grace period. Add rcu_barrier() on module exit path, to ensure pending flow entries are release before module goes away.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8bpftool4.18.0-553.176.1.el8_10ALSA-2026:85773
AlmaLinux:8kernel4.18.0-553.176.1.el8_10ALSA-2026:85773
AlmaLinux:9kernel5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:9kernel-64k5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:9kernel-64k-core5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:9kernel-64k-debug5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:9kernel-64k-debug-core5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:9kernel-64k-debug-devel5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:9kernel-64k-debug-devel-matched5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:9kernel-64k-debug-modules5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:9kernel-64k-debug-modules-core5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:9kernel-64k-debug-modules-extra5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:9kernel-64k-devel5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:9kernel-64k-devel-matched5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:9kernel-64k-modules5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:9kernel-64k-modules-core5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:9kernel-64k-modules-extra5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:8kernel-abi-stablelists4.18.0-553.176.1.el8_10ALSA-2026:85773
AlmaLinux:9kernel-abi-stablelists5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:8kernel-core4.18.0-553.176.1.el8_10ALSA-2026:85773
AlmaLinux:9kernel-core5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:8kernel-cross-headers4.18.0-553.176.1.el8_10ALSA-2026:85773
AlmaLinux:9kernel-cross-headers5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:8kernel-debug4.18.0-553.176.1.el8_10ALSA-2026:85773
AlmaLinux:9kernel-debug5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:8kernel-debug-core4.18.0-553.176.1.el8_10ALSA-2026:85773
AlmaLinux:9kernel-debug-core5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:8kernel-debug-devel4.18.0-553.176.1.el8_10ALSA-2026:85773
AlmaLinux:9kernel-debug-devel5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:9kernel-debug-devel-matched5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:8kernel-debug-modules4.18.0-553.176.1.el8_10ALSA-2026:85773
AlmaLinux:9kernel-debug-modules5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:9kernel-debug-modules-core5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:8kernel-debug-modules-extra4.18.0-553.176.1.el8_10ALSA-2026:85773
AlmaLinux:9kernel-debug-modules-extra5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:9kernel-debug-uki-virt5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:8kernel-devel4.18.0-553.176.1.el8_10ALSA-2026:85773
AlmaLinux:9kernel-devel5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:9kernel-devel-matched5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:8kernel-doc4.18.0-553.176.1.el8_10ALSA-2026:85773
AlmaLinux:9kernel-doc5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:8kernel-headers4.18.0-553.176.1.el8_10ALSA-2026:85773
AlmaLinux:9kernel-headers5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:8kernel-modules4.18.0-553.176.1.el8_10ALSA-2026:85773
AlmaLinux:9kernel-modules5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:9kernel-modules-core5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:8kernel-modules-extra4.18.0-553.176.1.el8_10ALSA-2026:85773
AlmaLinux:9kernel-modules-extra5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:8kernel-rt4.18.0-553.176.1.rt7.517.el8_10ALSA-2026:85774
AlmaLinux:9kernel-rt5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:9kernel-rt-64k5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:9kernel-rt-64k-core5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:9kernel-rt-64k-debug5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:9kernel-rt-64k-debug-core5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:9kernel-rt-64k-debug-devel5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:9kernel-rt-64k-debug-modules5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:9kernel-rt-64k-debug-modules-core5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:9kernel-rt-64k-debug-modules-extra5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:9kernel-rt-64k-devel5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:9kernel-rt-64k-modules5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:9kernel-rt-64k-modules-core5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:9kernel-rt-64k-modules-extra5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:8kernel-rt-core4.18.0-553.176.1.rt7.517.el8_10ALSA-2026:85774
AlmaLinux:9kernel-rt-core5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:8kernel-rt-debug4.18.0-553.176.1.rt7.517.el8_10ALSA-2026:85774
AlmaLinux:9kernel-rt-debug5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:8kernel-rt-debug-core4.18.0-553.176.1.rt7.517.el8_10ALSA-2026:85774
AlmaLinux:9kernel-rt-debug-core5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:8kernel-rt-debug-devel4.18.0-553.176.1.rt7.517.el8_10ALSA-2026:85774
AlmaLinux:9kernel-rt-debug-devel5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:8kernel-rt-debug-modules4.18.0-553.176.1.rt7.517.el8_10ALSA-2026:85774
AlmaLinux:9kernel-rt-debug-modules5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:9kernel-rt-debug-modules-core5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:8kernel-rt-debug-modules-extra4.18.0-553.176.1.rt7.517.el8_10ALSA-2026:85774
AlmaLinux:9kernel-rt-debug-modules-extra5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:8kernel-rt-devel4.18.0-553.176.1.rt7.517.el8_10ALSA-2026:85774
AlmaLinux:9kernel-rt-devel5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:8kernel-rt-modules4.18.0-553.176.1.rt7.517.el8_10ALSA-2026:85774
AlmaLinux:9kernel-rt-modules5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:9kernel-rt-modules-core5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:8kernel-rt-modules-extra4.18.0-553.176.1.rt7.517.el8_10ALSA-2026:85774
AlmaLinux:9kernel-rt-modules-extra5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:8kernel-tools4.18.0-553.176.1.el8_10ALSA-2026:85773
AlmaLinux:9kernel-tools5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:8kernel-tools-libs4.18.0-553.176.1.el8_10ALSA-2026:85773
AlmaLinux:9kernel-tools-libs5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:8kernel-tools-libs-devel4.18.0-553.176.1.el8_10ALSA-2026:85773
AlmaLinux:9kernel-tools-libs-devel5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:9kernel-uki-virt5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:9kernel-uki-virt-addons5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:8kernel-zfcpdump4.18.0-553.176.1.el8_10ALSA-2026:85773
AlmaLinux:9kernel-zfcpdump5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:8kernel-zfcpdump-core4.18.0-553.176.1.el8_10ALSA-2026:85773
AlmaLinux:9kernel-zfcpdump-core5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:8kernel-zfcpdump-devel4.18.0-553.176.1.el8_10ALSA-2026:85773
AlmaLinux:9kernel-zfcpdump-devel5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:9kernel-zfcpdump-devel-matched5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:8kernel-zfcpdump-modules4.18.0-553.176.1.el8_10ALSA-2026:85773
AlmaLinux:9kernel-zfcpdump-modules5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:9kernel-zfcpdump-modules-core5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:8kernel-zfcpdump-modules-extra4.18.0-553.176.1.el8_10ALSA-2026:85773
AlmaLinux:9kernel-zfcpdump-modules-extra5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:9libperf5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:8perf4.18.0-553.176.1.el8_10ALSA-2026:85773
AlmaLinux:9perf5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:8python3-perf4.18.0-553.176.1.el8_10ALSA-2026:85773
AlmaLinux:9python3-perf5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:9rtla5.14.0-687.61.1.el9_8ALSA-2026:90365
AlmaLinux:9rv5.14.0-687.61.1.el9_8ALSA-2026:90365
Debian:12linux6.1.190-1DEBIAN-CVE-2026-98320
Debian:13linux6.12.113-1DEBIAN-CVE-2026-98320
Debian:14linux7.2.8-1DEBIAN-CVE-2026-98320
Debian:12linux-6.126.12.113-1~deb12u1DEBIAN-CVE-2026-98320
Rocky Linux:8kernel0:4.18.0-553.176.1.el8_10RLSA-2026:85773
Rocky Linux:9kernel0:5.14.0-687.61.1.el9_8.cloud.1.0RXSA-2026:90365
Rocky Linux:9kernel0:5.14.0-687.61.1.el9_8RLSA-2026:90365
Rocky Linux:8kernel-rt0:4.18.0-553.176.1.rt7.517.el8_10RLSA-2026:85774
Ubuntu:22.04:LTSlinux5.15.0-202.212UBUNTU-CVE-2026-98320
Ubuntu:24.04:LTSlinuxno fix listedUBUNTU-CVE-2026-98320
Ubuntu:26.04:LTSlinux7.0.0-42.42UBUNTU-CVE-2026-98320
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2026-98320
Ubuntu:22.04:LTSlinux-aws5.15.0-1119.126UBUNTU-CVE-2026-98320
Ubuntu:24.04:LTSlinux-awsno fix listedUBUNTU-CVE-2026-98320
Ubuntu:26.04:LTSlinux-aws7.0.0-1016.17UBUNTU-CVE-2026-98320
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2026-98320
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2026-98320
Ubuntu:24.04:LTSlinux-aws-6.17no fix listedUBUNTU-CVE-2026-98320
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2026-98320
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2026-98320
Ubuntu:22.04:LTSlinux-aws-6.8no fix listedUBUNTU-CVE-2026-98320
Ubuntu:24.04:LTSlinux-aws-7.0no fix listedUBUNTU-CVE-2026-98320
Ubuntu:22.04:LTSlinux-azure5.15.0-1125.134UBUNTU-CVE-2026-98320
Ubuntu:24.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-98320
Ubuntu:26.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-98320
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2026-98320
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2026-98320
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2026-98320
Ubuntu:24.04:LTSlinux-azure-6.17no fix listedUBUNTU-CVE-2026-98320
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2026-98320
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2026-98320
Ubuntu:22.04:LTSlinux-azure-6.8no fix listedUBUNTU-CVE-2026-98320
Ubuntu:24.04:LTSlinux-azure-7.0no fix listedUBUNTU-CVE-2026-98320
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1124.133UBUNTU-CVE-2026-98320
Ubuntu:24.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-98320
Ubuntu:26.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-98320
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2026-98320
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2026-98320
Ubuntu:24.04:LTSlinux-azure-fde-6.17no fix listedUBUNTU-CVE-2026-98320
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2026-98320
Ubuntu:22.04:LTSlinux-azure-fde-6.8no fix listedUBUNTU-CVE-2026-98320
Ubuntu:24.04:LTSlinux-azure-fde-7.0no fix listedUBUNTU-CVE-2026-98320
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2026-98320
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2026-98320
Ubuntu:22.04:LTSlinux-gcp5.15.0-1120.130UBUNTU-CVE-2026-98320
Ubuntu:24.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2026-98320
Ubuntu:26.04:LTSlinux-gcp7.0.0-1016.18UBUNTU-CVE-2026-98320
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2026-98320
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2026-98320
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2026-98320
Ubuntu:24.04:LTSlinux-gcp-6.17no fix listedUBUNTU-CVE-2026-98320
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2026-98320
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2026-98320
Ubuntu:22.04:LTSlinux-gcp-6.8no fix listedUBUNTU-CVE-2026-98320
Ubuntu:24.04:LTSlinux-gcp-7.0no fix listedUBUNTU-CVE-2026-98320
Ubuntu:22.04:LTSlinux-gke5.15.0-1115.121UBUNTU-CVE-2026-98320
Ubuntu:24.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-98320
Ubuntu:26.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-98320
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1102.110UBUNTU-CVE-2026-98320
Ubuntu:24.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2026-98320
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2026-98320
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2026-98320
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2026-98320
Ubuntu:24.04:LTSlinux-hwe-6.17no fix listedUBUNTU-CVE-2026-98320
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2026-98320
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2026-98320
Ubuntu:22.04:LTSlinux-hwe-6.8no fix listedUBUNTU-CVE-2026-98320
Ubuntu:24.04:LTSlinux-hwe-7.07.0.0-42.42~24.04.1UBUNTU-CVE-2026-98320
Ubuntu:22.04:LTSlinux-ibm5.15.0-1113.117UBUNTU-CVE-2026-98320
Ubuntu:24.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2026-98320
Ubuntu:26.04:LTSlinux-ibm7.0.0-1017.17UBUNTU-CVE-2026-98320
Ubuntu:22.04:LTSlinux-ibm-6.8no fix listedUBUNTU-CVE-2026-98320
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2026-98320
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1114.120UBUNTU-CVE-2026-98320
Ubuntu:22.04:LTSlinux-kvm5.15.0-1111.116UBUNTU-CVE-2026-98320
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-197.207UBUNTU-CVE-2026-98320
Ubuntu:24.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2026-98320
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2026-98320
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2026-98320
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2026-98320
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2026-98320
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.8no fix listedUBUNTU-CVE-2026-98320
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1114.115UBUNTU-CVE-2026-98320
Ubuntu:24.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-98320
Ubuntu:26.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-98320
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2026-98320
Ubuntu:24.04:LTSlinux-nvidia-6.17no fix listedUBUNTU-CVE-2026-98320
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2026-98320
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2026-98320
Ubuntu:22.04:LTSlinux-nvidia-6.8no fix listedUBUNTU-CVE-2026-98320
Ubuntu:24.04:LTSlinux-nvidia-7.0no fix listedUBUNTU-CVE-2026-98320

Affected products (as reported)

VendorProductVersions
Linux Linux 0ff90b6c20340e57616a51ae1a1bf18156d6638a – before 93ff1594be1aad4da364462dd8db050ebcfda2de0ff90b6c20340e57616a51ae1a1bf18156d6638a – before eed6997e8dc40593a539fcc722e7ed51b18db86c0ff90b6c20340e57616a51ae1a1bf18156d6638a – before 61c6688be282277c6e91ab286a7acd0ae8681ac60ff90b6c20340e57616a51ae1a1bf18156d6638a – before a43cd2b67b91e943273c913237a7a88c50cdcfbc0ff90b6c20340e57616a51ae1a1bf18156d6638a – before 8274cdc5f9c57e17ed77fc4ba76212536c840f250ff90b6c20340e57616a51ae1a1bf18156d6638a – before 12c1ac230f4ca16e0017b62a963ab75e0b48074f0ff90b6c20340e57616a51ae1a1bf18156d6638a – before d9e6175a3ee48209ee65f294fc567b4e16b29b740ff90b6c20340e57616a51ae1a1bf18156d6638a – before e75a9fa1d44bcbd66ea02e8781bcca6ea4076e0d
Linux Linux 4.16

References