{"id":"CVE-2026-93288","summary":"netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state\n\nsashiko reports: \"nfnl_log_net_exit() calls nf_log_unset(), which\nclears the logger pointer without an RCU grace period.  Immediately after,\nops_free_list() frees the per-net state while concurrent packets might\nstill be executing nf_log_packet() under rcu_read_lock().\"\n\nClear the pointer via .pre_exit to make sure rcu readers have completed\nbefore pernet storage is free'd.  The change in nf_log_syslog.c is only\ndone for consistency: it doesn't use pernet data.","modified":"2026-10-13T11:41:54.529600608Z","published":"2026-09-24T16:02:12.144Z","related":["ALSA-2026:76738"],"database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/93xxx/CVE-2026-93288.json","cna_assigner":"Linux"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/33d1469b0124cc0baaea7a2032123b77a81e0940"},{"type":"WEB","url":"https://git.kernel.org/stable/c/3b9aa62d78ce80de47af2db472ff452398755213"},{"type":"WEB","url":"https://git.kernel.org/stable/c/5570d6c8b320dbcc602617ee08c27ce752fed65a"},{"type":"WEB","url":"https://git.kernel.org/stable/c/ba2e246aa294f9acd86194ea87fb6834ed0a37ac"},{"type":"WEB","url":"https://git.kernel.org/stable/c/dc20050b6b12ca58066715d088e1a537535d938d"},{"type":"WEB","url":"https://git.kernel.org/stable/c/f4461654374576e9d5d0245fd534c46ad8509051"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/93xxx/CVE-2026-93288.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93288"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"c83fa19603bdaeef17b815713dbbe3230c8a34ee"},{"fixed":"ba2e246aa294f9acd86194ea87fb6834ed0a37ac"},{"fixed":"5570d6c8b320dbcc602617ee08c27ce752fed65a"},{"fixed":"3b9aa62d78ce80de47af2db472ff452398755213"},{"fixed":"f4461654374576e9d5d0245fd534c46ad8509051"},{"fixed":"dc20050b6b12ca58066715d088e1a537535d938d"},{"fixed":"33d1469b0124cc0baaea7a2032123b77a81e0940"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-93288.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.12.0"},{"fixed":"5.15.222"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.1.189"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.158"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.111"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.53"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-93288.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}