Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Linux kernel 6.6.157.1-1 can mishandle rule updates
published 4 months ago
Summary
The Linux kernel version 6.6.157.1-1 has a flaw in the part that manages network filtering rules. If the system updates those rules while they are being read, it could cause instability or a crash. Apply the latest kernel update from your vendor to fix the issue.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Azure Linux:3 | azure | kernel | <= 6.6.150.1-1 |
| Azure Linux:3 | – | kernel |
<= 6.6.157.1-1 <= 6.6.152.1-1 |
Original advisory text
CVE-2026-52988 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase
Publish new hooks in the list into the basechain/flowtable using
splice_list_rcu() to ensure netlink dump list traversal via rcu is safe
while concurrent ruleset update is going on.
netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase
Publish new hooks in the list into the basechain/flowtable using
splice_list_rcu() to ensure netlink dump list traversal via rcu is safe
while concurrent ruleset update is going on.
References
Timeline
Published24 Jun 2026
Updated24 Sep 2026
First seen23 Sep 2026
Sources
AZL-90504 · OSV
Track software like this
Free during beta