Vulnerability in Linux

CVE-2026-53212

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_tunnel: fix use-after-free on object destroy nft_tunnel_obj_destroy() calls metadata_dst_free() which directly kfree()s the metadata_dst, ignoring the dst…

EPSS: 0.002 (7.4th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions af308b94a2a4a5a27bec9028354c4df444a7c8ba, 4.19, 0

References