Medium severity5.5NVD Advisory· Published May 27, 2026· Updated Sep 14, 2026
CVE-2026-45897
CVE-2026-45897
Description
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_counter: serialize reset with spinlock
Add a global static spinlock to serialize counter fetch+reset operations, preventing concurrent dump-and-reset from underrunning values.
The lock is taken before fetching the total so that two parallel resets cannot both read the same counter values and then both subtract them.
A global lock is used for simplicity since resets are infrequent. If this becomes a bottleneck, it can be replaced with a per-net lock later.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
22- osv-coords20 versionspkg:apk/chainguard/linux-gcp-6.18pkg:apk/chainguard/linux-gcp-6.18-bootcpkg:apk/chainguard/linux-gcp-6.18-bootc-boot-installedpkg:apk/chainguard/linux-qemu-6.18pkg:apk/chainguard/linux-qemu-6.18-bootcpkg:apk/chainguard/linux-qemu-6.18-bootc-boot-installedpkg:linux/kernelpkg:rpm/opensuse/dtb-aarch64&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-64kb&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-azure&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-default&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-default-base&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-docs&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-kvmsmall&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-obs-build&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-obs-qa&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-rt&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-source&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-syms&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-zfcpdump&distro=openSUSE%20Leap%2016.0
< 6.18.44-r0+ 19 more
- (no CPE)range: < 6.18.44-r0
- (no CPE)range: < 6.18.44-r0
- (no CPE)range: < 6.18.38-r2
- (no CPE)range: < 6.18.42-r0
- (no CPE)range: < 6.18.42-r0
- (no CPE)range: < 6.18.38-r2
- (no CPE)range: < 6.1.188
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1.160000.2.22
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
Patches
Vulnerability mechanics
References
6- git.kernel.org/stable/c/0cdc6d5a26f2d1f7f15a43526841b679445c32e2nvdPatch
- git.kernel.org/stable/c/779c60a5190c42689534172f4b49e927c9959e4envdPatch
- git.kernel.org/stable/c/48cf7918d10c66cb6b05226fa3fa5daf0c891089nvd
- git.kernel.org/stable/c/cd968dcdec6aee79a2d399e4f6e0eca63c3b45e1nvd
- git.kernel.org/stable/c/de6601f1374fab124cd9276df6671f64d940ceb4nvd
- git.kernel.org/stable/c/e13194e60217db02c2e7202375d9e5951267d87bnvd
News mentions
0No linked articles in our index yet.