{"id":"CVE-2026-90062","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: move hardware offload step after building the chain blob\n\nAllocate the chain blob before the ruleset offload to reduce chances of\nentering an inco…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: move hardware offload step after building the chain blob\n\nAllocate the chain blob before the ruleset offload to reduce chances of\nentering an inco…","severity":"high","cvss":7.1,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","vendor":"Linux","product":"Linux","affected":["Linux >= c9626a2cbdb20e26587b3fad99960520a023432b < 923f824f30faebc5560c3061a595063cecdbdbb8","Linux >= c9626a2cbdb20e26587b3fad99960520a023432b < 6e7ad6e69be4751ab2476042c70c600bdaa8d4f2","Linux >= c9626a2cbdb20e26587b3fad99960520a023432b < 309acbab74e46114246bf4346c9b60b3d8cb4fcd","Linux >= c9626a2cbdb20e26587b3fad99960520a023432b < 79eafe22ab0a650996da2b3e5d94a12c3e16f3aa","Linux >= c9626a2cbdb20e26587b3fad99960520a023432b < 52febaf1d311d6ede312b2ec7692a309714f9554","Linux >= c9626a2cbdb20e26587b3fad99960520a023432b < d5497644329d3a01e951aba76561bbd883ff6b0c","Linux >= c9626a2cbdb20e26587b3fad99960520a023432b < 6a7d3b074cfbb64513f5f92d60ab1b216ae98076","Linux >= c9626a2cbdb20e26587b3fad99960520a023432b < b1881d362e1924b66f6016c3efd28807032b41bf","Linux 5.3"],"published":"2026-09-17","updated":"2026-09-18","sourceUpdated":"2026-09-18T18:17:40.363","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-90062","references":[{"url":"https://git.kernel.org/stable/c/309acbab74e46114246bf4346c9b60b3d8cb4fcd","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/52febaf1d311d6ede312b2ec7692a309714f9554","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/6a7d3b074cfbb64513f5f92d60ab1b216ae98076","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/6e7ad6e69be4751ab2476042c70c600bdaa8d4f2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/79eafe22ab0a650996da2b3e5d94a12c3e16f3aa","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/923f824f30faebc5560c3061a595063cecdbdbb8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/b1881d362e1924b66f6016c3efd28807032b41bf","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/d5497644329d3a01e951aba76561bbd883ff6b0c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"tags":["nvd","cve.org"],"epss":0.0016,"epssPercentile":0.05614,"ingestedAt":"2026-09-17T16:21:47.901Z","slug":"CVE-2026-90062","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: move hardware offload step after building the chain blob\n\nAllocate the chain blob before the ruleset offload to reduce chances of\nentering an inconsistent state where the offloaded ruleset in the nic\nand the software ruleset differ.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":39,"depthScoreParts":{"impact":39.1,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":207101,"id":"CVE-2026-90062","ts":1789757331973,"field":"cvss","old":null,"new":"7.1"},{"seq":207100,"id":"CVE-2026-90062","ts":1789757331973,"field":"severity","old":"none","new":"high"}]}