CVE-2026-23139 Details
Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: update last_gc only when GC has been performed Currently last_gc is being updated everytime a new connection is tracked, that means that it is updated even if a GC wasn't performed. With a sufficiently high packet rate, it is possible to always bypass the GC, causing the list to grow infinitely. Update the last_gc value only when a GC has been actually performed.
A vulnerability in the Linux kernel's netfilter component, specifically in the connection counting feature, allows for an infinite growth of connection lists. This issue arises because the 'last_gc' (last garbage collection) timestamp is updated with every new connection, regardless of whether a garbage collection has actually occurred. Under high packet rates, it is possible to consistently bypass garbage collection, leading to unbounded list growth. The vulnerability affects the Linux kernel stable tree.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been addressed. Instructions for downloading the patched version are available on the official Linux kernel website.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/26a82dce2beee39c43c109d9647e16f49cb02a35 | kernel.org | Patch |
| https://git.kernel.org/stable/c/2c7c71113ed6d3e2f3aca4c088f22283016ff34f | kernel.org | Patch |
| https://git.kernel.org/stable/c/3cd717359e56f82f06cbf8279b47a7d79880c6f3 | kernel.org | Patch |
| https://git.kernel.org/stable/c/7811ba452402d58628e68faedf38745b3d485e3c | kernel.org | Patch |
| https://git.kernel.org/stable/c/8bdafdf4900040a81422056cabe5e00a37bd101a | kernel.org | Patch |
| https://git.kernel.org/stable/c/9f45588993d7f115280fc726119ca86fba32a811 | kernel.org | Patch |
| https://git.kernel.org/stable/c/c4cde57c8affdcca5bcff53a1047e15d268bdca1 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 5.19, < 6.1.161 >= 6.2, < 6.6.121 >= 6.7, < 6.12.66 >= 6.13, < 6.18.6 6.19 rc1 6.19 rc2 6.19 rc3 6.19 rc4 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Apr 3, 2026 | CVE Modified | kernel.org |
| Mar 17, 2026 | Initial Analysis | [email protected] |
| Feb 14, 2026 | New CVE Received | kernel.org |