CVE-2026-64150 | In the Linux kernel, the following vulnerability has been re… | CVSS 9.8 CRITICAL

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: release local_lock before re-enabling softirqs Quoting sashiko: In the error path, local_bh_enable() is called before local_unlock_nested_bh().

Metadata

CVE ID: CVE-2026-64150
State: PUBLISHED
Assigner: Linux
Reserved: 2026-07-19 07:54 UTC
Published: 2026-07-19 15:40 UTC
Last updated: 2026-07-20 13:43 UTC
Vendor / Product: Linux / Linux
Sources: cve.org · NVD

Severity & Metrics

9.8 CRITICAL CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products (2)

Vendor	Product	Platform	Versions
Linux	Linux	—	ba36fada9ab487634f61f92769c95bc148aa8f49 < df19b6af171695a1352314597c9a4311d48d5171, ba36fada9ab487634f61f92769c95bc148aa8f49 < 6fecd39c6401134b58505bc4eb1adc8a0e2fe992, ba36fada9ab487634f61f92769c95bc148aa8f49 < a6cb3ff979855f7f0ee9450a947fe8f96c2ba37a
Linux	Linux	—	6.16, 0 < 6.16, 6.18.34 ≤ 6.18., 7.0.11 ≤ 7.0. …

CVSS scores (1)

Score	Severity	Version	Source	Vector
9.8	CRITICAL	3.1	cna	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References (3)