CVE-2026-46319

Linux · Kernel

A race condition exists in the Linux kernel's net/sched: act_ct component due to improper RCU read lock handling during flow table lookups.

Executive summary

A concurrency vulnerability in the Linux kernel's network scheduling subsystem could potentially lead to memory corruption or system instability.

Vulnerability

The vulnerability arises in the tcf_ct_flow_table_get function where rhashtable_lookup_fast prematurely closes an RCU read critical section. This flaw allows for potential use-after-free or race conditions, typically requiring local access or specific network traffic triggers.

Business impact

The vulnerability carries a CVSS score of 7.8, indicating a high risk to system availability and integrity. Successful exploitation could result in kernel panics, system crashes, or unauthorized memory access, causing significant operational downtime for mission-critical infrastructure running affected kernel versions.

Remediation

Immediate Action: Apply the latest security patches provided by your Linux distribution vendor to resolve the RCU locking issue.

Proactive Monitoring: Monitor system logs for kernel oops or unexpected service restarts related to the networking stack.

Compensating Controls: Utilize kernel hardening modules and ensure that untrusted users are restricted from triggering complex network scheduling operations.

Exploitation status

Public Exploit Available: false

Analyst recommendation

Given the severity of kernel-level vulnerabilities, administrators should prioritize patching during the next maintenance cycle. Ensure that all production environments are updated to a kernel version that incorporates the fix for act_ct locking issues to prevent potential stability and security compromises.