CVE-2026-64150
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
In the Linux kernel, a bug was found in the netfilter nft_inner module's error path where local_bh_enable() is called before local_unlock_nested_bh(), potentially causing incorrect lock state and synchronization issues.
Risk Assessment
The organization may experience system instability or firewall (netfilter) rule processing errors, leading to network service disruption or security vulnerabilities.
Recommendation
Immediately update the Linux kernel to a version containing the fix for CVE-2026-64150, available from official distribution repositories.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: release local_lock before re-enabling softirqs Quoting sashiko: In the error path, local_bh_enable() is called before local_unlock_nested_bh().