CVE-2026-23274: In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM
infovulnerability
security
Summary
A vulnerability in the Linux kernel's netfilter module allows revision 0 rules to reuse timers created by revision 1 rules, but when those timers use ALARM type semantics (a special timer mode), the underlying timer structure is never initialized. This causes a crash when revision 0 tries to modify the uninitialized timer. The fix rejects revision 0 rules from reusing ALARM-type timers with the same label.
Solution / Mitigation
Fix this by rejecting revision 0 rule insertion when an existing timer with the same label is of ALARM type.
Vulnerability Details
EPSS (30-day exploit probability)
EPSS: 0.0%
Disclosure Date
March 20, 2026
Classification
Attack SophisticationModerate
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-23274
First tracked: March 20, 2026 at 08:07 AM
Classified by LLM (prompt v3) · confidence: 95%