THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-72255 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst The br_netfilter fake rtable is embedded in struct net_bridge and is attached to bridged packets with skb_dst_set_noref(). If such a packet is

[NVD] CVE-2026-72255 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst The br_netfilter fake rtable is embedded in struct net_bridge and is attached to bridged packets with skb_dst_set_noref(). If such a packet is

lownvdPublished 2026-08-15

CVE-2026-72255 CVSS: 7.8 HIGH Published: 2026-08-15T06:21:53.127

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst

The br_netfilter fake rtable is embedded in struct net_bridge and is attached to bridged packets with skb_dst_set_noref(). If such a packet is queued to NFQUEUE, __nf_queue() upgrades that fake ds

Indicators of compromise

CVE-2026-72255cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-72255