Medium severity5.5NVD Advisory· Published Jun 25, 2026· Updated Jul 8, 2026
CVE-2026-53269
CVE-2026-53269
Description
In the Linux kernel, the following vulnerability has been resolved:
netfilter: synproxy: add mutex to guard hook reference counting
As the synproxy infrastructure register netfilter hooks on-demand when a user adds the first iptables target or nftables expression, if done concurrently they can race each other.
Introduce a mutex to serialize the refcount control blocks access from both frontends. While a per namespace mutex might be more efficient, it is not needed for target/expression like SYNPROXY.
Affected products
15cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=5.3,<5.10.259
- cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.1:rc4:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.1:rc5:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.1:rc6:*:*:*:*:*:*
- osv-coords7 versionspkg:apk/chainguard/linux-azure-6.18pkg:apk/chainguard/linux-gcp-6.18pkg:apk/chainguard/linux-gcp-6.18-bootc-boot-installedpkg:apk/chainguard/linux-qemu-6.18pkg:apk/chainguard/linux-qemu-6.18-bootc-boot-installedpkg:apk/chainguard/linux-qemu-melangepkg:linux/kernel
< 6.18.38-r0+ 6 more
- (no CPE)range: < 6.18.38-r0
- (no CPE)range: < 6.18.38-r0
- (no CPE)range: < 6.18.38-r0
- (no CPE)range: < 6.18.38-r0
- (no CPE)range: < 6.18.38-r0
- (no CPE)range: < 6.18.38-r0
- (no CPE)range: >= 5.3.0, < 5.10.259
Patches
Vulnerability mechanics
References
8- git.kernel.org/stable/c/0ec9ddc1bda261a2c57636c74c8b4e53000102c9nvdPatch
- git.kernel.org/stable/c/0f8ba5e4c53d2e4a536aa68140beda9fe59b2f88nvdPatch
- git.kernel.org/stable/c/2fcba19caaeb2a33017459d3430f057967bb91b6nvdPatch
- git.kernel.org/stable/c/56ffbe3a08c01dcdb0d6adee9ce1e535bfb3b389nvdPatch
- git.kernel.org/stable/c/640441348258220e78daed40528b85b8afcedab6nvdPatch
- git.kernel.org/stable/c/aaf80701dc2f7a48fe543961e21f8ca3924d587cnvdPatch
- git.kernel.org/stable/c/debc57b83d5b323df74bf010c8d50fe26ad2ed6bnvdPatch
- git.kernel.org/stable/c/fbf0591275f50eae5733c3d7a8cd6c1e79933ffanvdPatch
News mentions
0No linked articles in our index yet.