What’s Vulnerable › Vulnerabilities

CVE-2026-90062: netfilter: nf_tables: move hardware offload step after building the chain blob

• Severity: high (CVSS 7.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-17 · updated 2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: move hardware offload step after building the chain blob Allocate the chain blob before the ruleset offload to reduce chances of entering an inconsistent state where the offloaded ruleset in the nic and the software ruleset differ.

Affected products

• Linux kernel: 5.3 — fixed in 7.3

How to fix

Upgrade to a fixed version: Linux kernel 7.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/309acbab74e46114246bf4346c9b60b3d8cb4fcd
• https://git.kernel.org/stable/c/52febaf1d311d6ede312b2ec7692a309714f9554
• https://git.kernel.org/stable/c/6a7d3b074cfbb64513f5f92d60ab1b216ae98076
• https://git.kernel.org/stable/c/6e7ad6e69be4751ab2476042c70c600bdaa8d4f2
• https://git.kernel.org/stable/c/79eafe22ab0a650996da2b3e5d94a12c3e16f3aa
• https://git.kernel.org/stable/c/923f824f30faebc5560c3061a595063cecdbdbb8
• https://git.kernel.org/stable/c/b1881d362e1924b66f6016c3efd28807032b41bf
• https://git.kernel.org/stable/c/d5497644329d3a01e951aba76561bbd883ff6b0c

Get alerted when CVE-2026-90062 or the next vulnerability affects your stack