netfilter: flowtable: generalize pending status bit
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: generalize pending status bit Rename NF_FLOW_HW_PENDING to NF_FLOW_PENDING and use it to inhibit the flowtable GC worker until pending hw offload work has been completed. Apparently, nf_flow_offload_stats() can schedule work to retrieve stats while the flow is being removed by GC. And this bit can also be used in a follow up patch to disable GC until the flow has been fully added in both directions. Revert the reordering done in commit d644b23afe1e ("netfilter: flowtable: publish HW_DEAD after worker is done") to prevent a race between GC and hw offload handler.
CVE-2026-98792
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-98792
Linux
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Linux
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "2c8897953f3b2ff5498f3f275708a742bfcdbc24",
"lessThan": "f7e292f3c8c853f27a1af7eaf3428a0e76fe5fcc",
"versionType": "git"
},
{
"status": "affected",
"version": "2c8897953f3b2ff5498f3f275708a742bfcdbc24",
"lessThan": "4d52b72f3aa68ad0536444e36530bda75070194c",
"versionType": "git"
},
{
"status": "affected",
"version": "2c8897953f3b2ff5498f3f275708a742bfcdbc24",
"lessThan": "4033e1a9262c57dfbfc594a591a50fcba63c531a",
"versionType": "git"
},
{
"status": "affected",
"version": "2c8897953f3b2ff5498f3f275708a742bfcdbc24",
"lessThan": "a2cac45848d1cf31ed190db30f90ba8211e9a8ca",
"versionType": "git"
},
{
"status": "affected",
"version": "2c8897953f3b2ff5498f3f275708a742bfcdbc24",
"lessThan": "7c549fb7eecd01fdba7c0d12c01da876ef8a3214",
"versionType": "git"
}
],
"programFiles": [
"include/net/netfilter/nf_flow_table.h",
"net/netfilter/nf_flow_table_core.c",
"net/netfilter/nf_flow_table_offload.c",
"net/sched/act_ct.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "5.7"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "5.7",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "6.6.160",
"versionType": "semver",
"lessThanOrEqual": "6.6.*"
},
{
"status": "unaffected",
"version": "6.12.113",
"versionType": "semver",
"lessThanOrEqual": "6.12.*"
},
{
"status": "unaffected",
"version": "6.18.56",
"versionType": "semver",
"lessThanOrEqual": "6.18.*"
},
{
"status": "unaffected",
"version": "7.2.10",
"versionType": "semver",
"lessThanOrEqual": "7.2.*"
},
{
"status": "unaffected",
"version": "7.3",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"include/net/netfilter/nf_flow_table.h",
"net/netfilter/nf_flow_table_core.c",
"net/netfilter/nf_flow_table_offload.c",
"net/sched/act_ct.c"
],
"defaultStatus": "affected"
}
]- Related CVEs
- CVE-2026-98792
Source reference:
/cveMetadata/cveId
Publisher severity
No explicit severity was provided.
- Event
- #48981 · Revision 1
- Added to Heist Feed
- Publisher date