High severity7.8NVD Advisory· Published Sep 24, 2026· Updated Oct 3, 2026
CVE-2026-93288
CVE-2026-93288
Description
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state
sashiko reports: "nfnl_log_net_exit() calls nf_log_unset(), which clears the logger pointer without an RCU grace period. Immediately after, ops_free_list() frees the per-net state while concurrent packets might still be executing nf_log_packet() under rcu_read_lock()."
Clear the pointer via .pre_exit to make sure rcu readers have completed before pernet storage is free'd. The change in nf_log_syslog.c is only done for consistency: it doesn't use pernet data.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
78- osv-coords77 versionspkg:linux/kernelpkg:rpm/almalinux/bpftoolpkg:rpm/almalinux/kernelpkg:rpm/almalinux/kernel-64kpkg:rpm/almalinux/kernel-64k-corepkg:rpm/almalinux/kernel-64k-debugpkg:rpm/almalinux/kernel-64k-debug-corepkg:rpm/almalinux/kernel-64k-debug-develpkg:rpm/almalinux/kernel-64k-debug-devel-matchedpkg:rpm/almalinux/kernel-64k-debug-modulespkg:rpm/almalinux/kernel-64k-debug-modules-corepkg:rpm/almalinux/kernel-64k-debug-modules-extrapkg:rpm/almalinux/kernel-64k-develpkg:rpm/almalinux/kernel-64k-devel-matchedpkg:rpm/almalinux/kernel-64k-modulespkg:rpm/almalinux/kernel-64k-modules-corepkg:rpm/almalinux/kernel-64k-modules-extrapkg:rpm/almalinux/kernel-abi-stablelistspkg:rpm/almalinux/kernel-corepkg:rpm/almalinux/kernel-cross-headerspkg:rpm/almalinux/kernel-debugpkg:rpm/almalinux/kernel-debug-corepkg:rpm/almalinux/kernel-debug-develpkg:rpm/almalinux/kernel-debug-devel-matchedpkg:rpm/almalinux/kernel-debug-modulespkg:rpm/almalinux/kernel-debug-modules-corepkg:rpm/almalinux/kernel-debug-modules-extrapkg:rpm/almalinux/kernel-debug-uki-virtpkg:rpm/almalinux/kernel-develpkg:rpm/almalinux/kernel-devel-matchedpkg:rpm/almalinux/kernel-docpkg:rpm/almalinux/kernel-headerspkg:rpm/almalinux/kernel-modulespkg:rpm/almalinux/kernel-modules-corepkg:rpm/almalinux/kernel-modules-extrapkg:rpm/almalinux/kernel-modules-extra-matchedpkg:rpm/almalinux/kernel-rtpkg:rpm/almalinux/kernel-rt-64kpkg:rpm/almalinux/kernel-rt-64k-corepkg:rpm/almalinux/kernel-rt-64k-debugpkg:rpm/almalinux/kernel-rt-64k-debug-corepkg:rpm/almalinux/kernel-rt-64k-debug-develpkg:rpm/almalinux/kernel-rt-64k-debug-modulespkg:rpm/almalinux/kernel-rt-64k-debug-modules-corepkg:rpm/almalinux/kernel-rt-64k-debug-modules-extrapkg:rpm/almalinux/kernel-rt-64k-develpkg:rpm/almalinux/kernel-rt-64k-modulespkg:rpm/almalinux/kernel-rt-64k-modules-corepkg:rpm/almalinux/kernel-rt-64k-modules-extrapkg:rpm/almalinux/kernel-rt-corepkg:rpm/almalinux/kernel-rt-debugpkg:rpm/almalinux/kernel-rt-debug-corepkg:rpm/almalinux/kernel-rt-debug-develpkg:rpm/almalinux/kernel-rt-debug-modulespkg:rpm/almalinux/kernel-rt-debug-modules-corepkg:rpm/almalinux/kernel-rt-debug-modules-extrapkg:rpm/almalinux/kernel-rt-develpkg:rpm/almalinux/kernel-rt-modulespkg:rpm/almalinux/kernel-rt-modules-corepkg:rpm/almalinux/kernel-rt-modules-extrapkg:rpm/almalinux/kernel-toolspkg:rpm/almalinux/kernel-tools-libspkg:rpm/almalinux/kernel-tools-libs-develpkg:rpm/almalinux/kernel-uki-virtpkg:rpm/almalinux/kernel-uki-virt-addonspkg:rpm/almalinux/kernel-zfcpdumppkg:rpm/almalinux/kernel-zfcpdump-corepkg:rpm/almalinux/kernel-zfcpdump-develpkg:rpm/almalinux/kernel-zfcpdump-devel-matchedpkg:rpm/almalinux/kernel-zfcpdump-modulespkg:rpm/almalinux/kernel-zfcpdump-modules-corepkg:rpm/almalinux/kernel-zfcpdump-modules-extrapkg:rpm/almalinux/libperfpkg:rpm/almalinux/perfpkg:rpm/almalinux/python3-perfpkg:rpm/almalinux/rtlapkg:rpm/almalinux/rv
>= 4.12.0, < 5.15.222+ 76 more
- (no CPE)range: >= 4.12.0, < 5.15.222
- (no CPE)range: < 4.18.0-553.176.1.el8_10
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
Patches
Vulnerability mechanics
References
6- git.kernel.org/stable/c/33d1469b0124cc0baaea7a2032123b77a81e0940nvd
- git.kernel.org/stable/c/3b9aa62d78ce80de47af2db472ff452398755213nvd
- git.kernel.org/stable/c/5570d6c8b320dbcc602617ee08c27ce752fed65anvd
- git.kernel.org/stable/c/ba2e246aa294f9acd86194ea87fb6834ed0a37acnvd
- git.kernel.org/stable/c/dc20050b6b12ca58066715d088e1a537535d938dnvd
- git.kernel.org/stable/c/f4461654374576e9d5d0245fd534c46ad8509051nvd
News mentions
0No linked articles in our index yet.