CVE-2026-90062
netfilter: nf_tables: move hardware offload step after building the chain blob
Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: move hardware offload step after building the chain blob Allocate the chain blob before the ruleset offload to reduce chances of entering an inconsistent state where the offloaded ruleset in the nic and the software ruleset differ.
INFO
Published Date :
Sept. 17, 2026, 5:16 p.m.
Last Modified :
Sept. 18, 2026, 6:17 p.m.
Remotely Exploit :
No
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
CVSS Scores
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS 3.1 | HIGH | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
Solution
- Allocate chain blob before ruleset offload.
- Ensure NIC and software rulesets are consistent.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2026-90062.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2026-90062 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2026-90062
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-90062 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2026-90062 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Sep. 18, 2026
Action Type Old Value New Value Added CVSS V3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H -
New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Sep. 17, 2026
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: move hardware offload step after building the chain blob Allocate the chain blob before the ruleset offload to reduce chances of entering an inconsistent state where the offloaded ruleset in the nic and the software ruleset differ. Added Affected New affected value received. <a href="https://github.com/CVEProject/cvelistV5/blob/main/cves/2026/90xxx/CVE-2026-90062.json">CVE-2026-90062</a> Added Reference https://git.kernel.org/stable/c/309acbab74e46114246bf4346c9b60b3d8cb4fcd Added Reference https://git.kernel.org/stable/c/52febaf1d311d6ede312b2ec7692a309714f9554 Added Reference https://git.kernel.org/stable/c/6a7d3b074cfbb64513f5f92d60ab1b216ae98076 Added Reference https://git.kernel.org/stable/c/6e7ad6e69be4751ab2476042c70c600bdaa8d4f2 Added Reference https://git.kernel.org/stable/c/79eafe22ab0a650996da2b3e5d94a12c3e16f3aa Added Reference https://git.kernel.org/stable/c/923f824f30faebc5560c3061a595063cecdbdbb8 Added Reference https://git.kernel.org/stable/c/b1881d362e1924b66f6016c3efd28807032b41bf Added Reference https://git.kernel.org/stable/c/d5497644329d3a01e951aba76561bbd883ff6b0c