CVE-2026-23399Disclosure(linux / linux_kernel)

LOWCVSS 5.5 · MEDIUM

Signal is active with 4 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

In the Linux kernel, the following vulnerability has been resolved: nf_tables: nft_dynset: fix possible stateful expression memleak in error path If cloning the second stateful expression in the element via GFP_ATOMIC fails, then the first stateful expression remains in place without being released. unreferenced object (percpu) 0x607b97e9cab8 (size 16): comm "softirq", pid 0, jiffies 4294931867 hex dump (first 16 bytes on cpu 3): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 backtrace (crc 0): pcpu_alloc_noprof+0x453/0xd80 nft_counter_clone+0x9c/0x190 [nf_tables] nft_expr_clone+0x8f/0x1b0 [nf_tables] nft_dynset_new+0x2cb/0x5f0 [nf_tables] nft_rhash_update+0x236/0x11c0 [nf_tables] nft_dynset_eval+0x11f/0x670 [nf_tables] nft_do_chain+0x253/0x1700 [nf_tables] nft_do_chain_ipv4+0x18d/0x270 [nf_tables] nf_hook_slow+0xaa/0x1e0 ip_local_deliver+0x209/0x330

linux CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Patch / fix

Other references

Weakness type (CWE)

CWE-401

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

linux_kernel

Threat summary

4 mentions across 1 observed day

What's happening

Technical details provided in 2 signals
Disclosure: 3 classified signals
General: 1 classified signal
4 total mentions across 1 day

Affected systems

Vendors

linux

Products

linux_kernel

2 versions affected across 1 product

Deep dive

Activity timeline4 mentions / 1d

Signal classification2 categories

Disclosure

375.0%

General

125.0%

Referenced assets5 URLs

By indicator

Full discourse4 posts

Vulmon Vulnerability Feed@VulmonFeeds194d
General
CVE-2026-23399 In the Linux kernel, the following vulnerability has been resolve... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-23399 Customizable Vulnerability Alerts: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=4
Post summary
The post simply cites a CVE ID and provides a link to a vulnerability details page, offering no substantive technical or operational information.
0000154
4.0K followersView on X
CVEarity@CVEarity194d
Disclosure
⚡ New CVE Alert: CVE-2026-23399 🚨 Risk Level: Unknown 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-23399 #CVE-2026-23399 #CVE #CyberSecurity #InfoSec https://t.co/YtSlOWGJT1
Post summary
The tweet announces CVE‑2026‑23399, notes an unknown risk and unspecified affected products, and links only to the NVD page, providing no further technical or mitigation details.
0000025
123 followersView on X
CVE@CVEnew194d
Disclosure
CVE-2026-23399 In the Linux kernel, the following vulnerability has been resolved: nf_tables: nft_dynset: fix possible stateful expression memleak in error path If cloning the sec… https://www.cve.org/CVERecord?id=CVE-2026-23399
Post summary
The post informs that CVE‑2026‑23399, a memory leak in the Linux kernel’s nf_tables nft_dynset, has been resolved, providing the technical detail of the issue but offering no PoC, exploit, or explicit patch information.
0000093
56.9K followersView on X
CyberDudeBivash® | Global Cybersecurity Company@cyberbivash194d
Disclosure
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-23399 - nf_tables: nft_dynset: fix possible stateful expression memleak in error path Intel Report: https://ift.tt/0kUEQOh
Post summary
The message is a brief alert about CVE-2026-23399, providing its component and error path details, along with a link to an Intel report, but offers no PoC, exploit, patch, or evidence of active exploitation.
0000022
283 followersView on X

CPE platform detail9 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

9 of 9 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	linux	linux_kernel	-	-	-
OS	linux	linux_kernel	5.11	-	-
OS	linux	linux_kernel	7.0	-	-
OS	linux	linux_kernel	7.0	-	-
OS	linux	linux_kernel	7.0	-	-
OS	linux	linux_kernel	7.0	-	-
OS	linux	linux_kernel	7.0	-	-
OS	linux	linux_kernel	7.0	-	-
OS	linux	linux_kernel	7.0	-	-

Explore more

Back to dashboard linux CVEs linux_kernel vulnerabilities

What researchers are saying

CVE-2026-23399

Vulmon Vulnerability Feed@VulmonFeedsGeneral

The post simply cites a CVE ID and provides a link to a vulnerability details page, offering no substantive technical or operational information.

CVEarity@CVEarityDisclosure

The tweet announces CVE‑2026‑23399, notes an unknown risk and unspecified affected products, and links only to the NVD page, providing no further technical or mitigation details.

CVE@CVEnewDisclosure

The post informs that CVE‑2026‑23399, a memory leak in the Linux kernel’s nf_tables nft_dynset, has been resolved, providing the technical detail of the issue but offering no PoC, exploit, or explicit patch information.

CyberDudeBivash® | Global Cybersecurity Company@cyberbivashDisclosure

The message is a brief alert about CVE-2026-23399, providing its component and error path details, along with a link to an Intel report, but offers no PoC, exploit, patch, or evidence of active exploitation.