CVE-2026-46319
Linux · Kernel
A race condition exists in the Linux kernel's net/sched: act_ct component due to improper RCU read lock handling during flow table lookups.
Executive summary
A concurrency vulnerability in the Linux kernel's network scheduling subsystem could potentially lead to memory corruption or system instability.
Vulnerability
The vulnerability arises in the tcf_ct_flow_table_get function where rhashtable_lookup_fast prematurely closes an RCU read critical section. This flaw allows for potential use-after-free or race conditions, typically requiring local access or specific network traffic triggers.
Business impact
The vulnerability carries a CVSS score of 7.8, indicating a high risk to system availability and integrity. Successful exploitation could result in kernel panics, system crashes, or unauthorized memory access, causing significant operational downtime for mission-critical infrastructure running affected kernel versions.
Remediation
Immediate Action: Apply the latest security patches provided by your Linux distribution vendor to resolve the RCU locking issue.
Proactive Monitoring: Monitor system logs for kernel oops or unexpected service restarts related to the networking stack.
Compensating Controls: Utilize kernel hardening modules and ensure that untrusted users are restricted from triggering complex network scheduling operations.
Exploitation status
Public Exploit Available: false
Analyst recommendation
Given the severity of kernel-level vulnerabilities, administrators should prioritize patching during the next maintenance cycle. Ensure that all production environments are updated to a kernel version that incorporates the fix for act_ct locking issues to prevent potential stability and security compromises.