{"schema":"threatline.record/2","record":{"id":"CVE-2026-97608","aliases":[],"summary":"netfilter: nf_log: unregister loggers before per-net teardown","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_log: unregister loggers before per-net teardown\n\nnf_log_syslog and nfnetlink_log unregister their per-network namespace\noperations before unregistering their global logger backends. This\nleaves a window where a sysctl or netlink writer can rebind the still-\nregistered logger after the per-net pre-exit callback cleared the old\nselection.\n\nThe race looks like this:\n\n  CPU 0                                 CPU 1\n  ----                                  ----\n  unregister_pernet_subsys()\n    nf_log_unset(net, logger)\n      net->nf.nf_loggers[pf] = NULL\n\n                                        lock nf_log_mutex\n                                        find logger in loggers[][]\n                                        net->nf.nf_loggers[pf] = logger\n                                        unlock nf_log_mutex\n\n  nf_log_unregister(logger)\n    lock nf_log_mutex\n    loggers[pf][type] = NULL\n    unlock nf_log_mutex\n    synchronize_rcu()\n  module exit returns\n  module core frees backend memory\n\nLater, a sysctl read or packet logging operation can dereference the\nstale per-net logger pointer.\n\nFix this by unregistering the global logger backends before tearing down\nper-net state. Once the global registrations are gone, later writers can\nno longer rebind the logger. unregister_pernet_subsys() already waits\nfor an RCU grace period after the pre-exit callback clears the per-net\nselection, while nf_log_unregister() continues to cover readers of the\nglobal logger table.\n\nApply this ordering fix to both nf_log backends that combine per-net\nteardown with global logger registration.","categories":["Operating systems"],"product":"Linux","vendor":"Linux","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97608","source_modified_at":"2026-10-19T09:10:12.020Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"Linux","vendor":"Linux","versions":[{"version":"5b023fc8d8e0997e0b7ea6506d243afd5478c96e","lessThan":"51417230716b73f6aa1dc402b3a56d3382a694dc","status":"affected","versionType":"git"},{"version":"5b023fc8d8e0997e0b7ea6506d243afd5478c96e","lessThan":"b0514ca1ee6f2b708d6c602ea946acdfc6a90e24","status":"affected","versionType":"git"},{"version":"5b023fc8d8e0997e0b7ea6506d243afd5478c96e","lessThan":"90166834b7dc6131aa42b6b14b8b4ed47be97079","status":"affected","versionType":"git"},{"version":"5b023fc8d8e0997e0b7ea6506d243afd5478c96e","lessThan":"eaec35fae8f2052c1878a5c7cc7699d8357d79f2","status":"affected","versionType":"git"},{"version":"5b023fc8d8e0997e0b7ea6506d243afd5478c96e","lessThan":"64803ba0a05791cf9ca874466480e4c4cadaf7ab","status":"affected","versionType":"git"},{"version":"5b023fc8d8e0997e0b7ea6506d243afd5478c96e","lessThan":"dce24f3a146948595bb1b86347f31e20b4975daa","status":"affected","versionType":"git"},{"version":"5b023fc8d8e0997e0b7ea6506d243afd5478c96e","lessThan":"2c018cc4842c33f0c732962e2ab58635e8ae5823","status":"affected","versionType":"git"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97608","source_modified_at":"2026-10-19T09:10:12.020Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"Linux","vendor":"Linux","versions":[{"version":"3.10","status":"affected"},{"version":"0","lessThan":"3.10","status":"unaffected","versionType":"semver"},{"version":"5.15.222","lessThanOrEqual":"5.15.*","status":"unaffected","versionType":"semver"},{"version":"6.1.189","lessThanOrEqual":"6.1.*","status":"unaffected","versionType":"semver"},{"version":"6.6.158","lessThanOrEqual":"6.6.*","status":"unaffected","versionType":"semver"},{"version":"6.12.111","lessThanOrEqual":"6.12.*","status":"unaffected","versionType":"semver"},{"version":"6.18.53","lessThanOrEqual":"6.18.*","status":"unaffected","versionType":"semver"},{"version":"7.2.7","lessThanOrEqual":"7.2.*","status":"unaffected","versionType":"semver"},{"version":"7.3","lessThanOrEqual":"*","status":"unaffected","versionType":"original_commit_for_fix"}],"defaultStatus":"affected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97608","source_modified_at":"2026-10-19T09:10:12.020Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"51417230716b73f6aa1dc402b3a56d3382a694dc","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97608","source_modified_at":"2026-10-19T09:10:12.020Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"90166834b7dc6131aa42b6b14b8b4ed47be97079","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97608","source_modified_at":"2026-10-19T09:10:12.020Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"64803ba0a05791cf9ca874466480e4c4cadaf7ab","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97608","source_modified_at":"2026-10-19T09:10:12.020Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"2c018cc4842c33f0c732962e2ab58635e8ae5823","basis":"first unaffected version stated in the CVE record"}],"cvss":7,"severity":"High","kev":{"listed":false},"epss":{"probability":0.00145,"percentile":0.03441,"score_date":"2026-10-23"},"published_at":"2026-09-25T10:22:19.030Z","modified_at":"2026-10-19T09:10:12.020Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-97608","fetched_at":"2026-10-23T18:45:31.882637Z","source_modified_at":"2026-10-19T09:10:12.020Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-97608","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://git.kernel.org/stable/c/51417230716b73f6aa1dc402b3a56d3382a694dc"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/b0514ca1ee6f2b708d6c602ea946acdfc6a90e24"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/90166834b7dc6131aa42b6b14b8b4ed47be97079"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/eaec35fae8f2052c1878a5c7cc7699d8357d79f2"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/64803ba0a05791cf9ca874466480e4c4cadaf7ab"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/dce24f3a146948595bb1b86347f31e20b4975daa"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/2c018cc4842c33f0c732962e2ab58635e8ae5823"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-19T09:10:12.020Z","content_hash":"4e26bbf56038be549a7ef74aebe72dedf214af78303ffbc8b4c4f18a991d9f22"}}