CVE-2026-74260

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them Update nft_dup and nft_fwd to use the nf_dev_xmit_recursion() helpers. This patch also disables BH when transmitting the skb to address a possible migration to different CPU leading to imbalanced decrementation of the recursion counters. This is modeled after Florian Westphal's dev_xmit_recursion*() API available since commit 97cdcf37b57e ("net: place xmit recursion in softnet data") according to its current state in the tree.

CVSS 3.1

7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.2% chance of exploitation in the next 30 days; higher than 6% of CVEs (scores of 2026-10-25)

Published

2026-08-15

Modified

2026-10-15

Record from

the NVD, synced 2026-10-19

References

• https://git.kernel.org/stable/c/2354e975932dabb06fad239f07a3b68fd1809737
• https://git.kernel.org/stable/c/53fb46cf933dc4361c1a72491e247841d0b0fc85
• https://git.kernel.org/stable/c/edf234f71fb327792196f813048ab8f5bd3bb712

Check your stackJSON