CVE-2026-23274: In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM
infovulnerability
A vulnerability in the Linux kernel's netfilter module allows revision 0 rules to reuse timers created by revision 1 rules, but when those timers use ALARM type semantics (a special timer mode), the underlying timer structure is never initialized. This causes a crash when revision 0 tries to modify the uninitialized timer. The fix rejects revision 0 rules from reusing ALARM-type timers with the same label.
Fix this by rejecting revision 0 rule insertion when an existing timer with the same label is of ALARM type.
EPSS: 0.0%
March 20, 2026
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-23274
First tracked: March 20, 2026 at 08:07 AM
Classified by LLM (prompt v3) · confidence: 95%