7.8

CVE-2026-46324: linux Race Condition

CVSS: 7.8v3.1HighModified
AliasesUBUNTU-CVE-2026-46324DEBIAN-CVE-2026-46324CGA-2h9m-r8g8-phcj
Published 09-06-2026Last modified 21-10-2026
Open JSON

Vulnerability summary

CVE-2026-46324 is a high (CVSS 7.8) Race Condition vulnerability in linux. EPSS estimates a 0.10% chance of exploitation in the next 30 days, higher than 0.5% of scored vulnerabilities.

Overall risk
31/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.8/10
010
High · v3.1 (CVE.org)
EPSS score
0.10%
0%100%
Low · -0.02 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 26 · Related 26
OPENSUSE-SU-2026:11014-1OPENSUSE-SU-2026:21555-1SUSE-SU-2026:23066-1SUSE-SU-2026:23068-1SUSE-SU-2026:23193-1SUSE-SU-2026:23194-1

Timeline

  1. 09-06-2026
    PublishedVulnerability first disclosed.
  2. 21-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: use list_del_rcu for netlink hooks nft_netdev_unregister_hooks and __nft_unregister_flowtable_net_hooks need to use list_del_rcu(), this list can be walked by concurrent dumpers. Add a new helper and use it consistently.

CVSS metrics

6 scores · 5 sources · 2 versions

EPSS trend

Probability

0.10%

Chance of exploitation in the next 30 days

Percentile

1%

Versus all other CVEs

30-day change

-0.02 pp

From 0.12% on 21-09-2026

21-09-202621-10-2026
EPSS score
0.10%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu164 products
  • linuxAll versions (No fix recorded) | < 7.0.0-28.28
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 7.0.0-1009.9
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Chainguard5 products
  • linux-aws-6.12All versions (No fix recorded)
  • linux-azure-6.12All versions (No fix recorded)
  • linux-gcp-6.12All versions (No fix recorded)
  • linux-qemu-6.12All versions (No fix recorded)
  • linux-vmware-6.12All versions (No fix recorded)
Linux2 products
  • linux≥ f9a43007d3f7ba76d5e7f9421094f00f2ef202f8, < 2405730fde96f7fa483a5862e323b681e0e09f54 | ≥ f9a43007d3f7ba76d5e7f9421094f00f2ef202f8, < fe45e203527af8a2c0dc4c8a7b56c09c74b796c8 | ≥ f9a43007d3f7ba76d5e7f9421094f00f2ef202f8, < 0bd93ce4f3c35e845532184331d7917d7e562c80 | ≥ f9a43007d3f7ba76d5e7f9421094f00f2ef202f8, < 0f33e8ad6ac563ae2233dd7f75884e0ee010521d | ≥ f9a43007d3f7ba76d5e7f9421094f00f2ef202f8, < f3224ee463f8f6f6ced7dcdf6081add4f8128527 | c73955a09408e7374d9abfd0e78ce3de9cda0635 | b09e6ccf0d12f9356e8e3508d3e3dce126298538 | 3fac8ce48fa9fd61ee9056d3ed48b2edefca8b82 | 9c413a8c8bb49cc16796371805ecb260e885bb2b | a3940dcf552f2393d1e8f263b386593f98abe829 | 86c0154f4c3a56c5db8b9dd09e3ce885382c2c19 | ≥ 4.19.316, < 4.20 | ≥ 5.4.262, < 5.5 | ≥ 5.10.198, < 5.11 | ≥ 5.15.45, < 5.16 | ≥ 5.17.13, < 5.18 | ≥ 5.18.2, < 5.19 | 5.19
  • linux_kernel≥ 4.19.316, < 4.20 | ≥ 5.4.262, < 5.5 | ≥ 5.10.198, < 5.11 | ≥ 5.15.45, < 5.16 | ≥ 5.17.13, < 5.18 | ≥ 5.18.2, < 6.18.33 | ≥ 6.19, < 7.0.10 | 7.1:rc1
Debian1 product
  • linuxAll versions (No fix recorded) | < 7.0.10-1

4 vendors · 172 products

References

24 links
Show all 24 references