01 Record

CVE-2026-23274

netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.17% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 6.4% of scored records. A rank, not a probability.
NVD base score: 7.8 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-07-14.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-03-20 08:08Z5 MO AGO

Last updated

2026-08-05 12:21Z1 MO AGO

Reserved

2026-01-13

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-908Use of Uninitialized ResourceBase

Data version

5.2

Document digest

35aac11da74ffba6150013a1c670dbe11ce1c1214bced3d1e2594923d270feb3

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux68983a354a655c35d3fb204489d383a2a051fda7 to < 32e937dc6e97f5ed3cdfe3fc0b2b19a05e23fa44, 68983a354a655c35d3fb204489d383a2a051fda7 to < 144f88054ba0180467356f40895bd660b5dceeec, 68983a354a655c35d3fb204489d383a2a051fda7 to < 28c7cfaf0c0ab17cbd7754092116fd1af45271f9, 68983a354a655c35d3fb204489d383a2a051fda7 to < 54080355999381fed4a26129579a5765bab87491, 68983a354a655c35d3fb204489d383a2a051fda7 to < 5e7ece24c5cb75a60402aad4d803c7898ea40aa9, 68983a354a655c35d3fb204489d383a2a051fda7 to < f5ef97c13165542480a6ffdbe6f09f40bbb7cbf1, 68983a354a655c35d3fb204489d383a2a051fda7 to < f228b9ae2a7e84d1153616d8e71c4236cb1f1309, 68983a354a655c35d3fb204489d383a2a051fda7 to < 329f0b9b48ee6ab59d1ab72fef55fe8c6463a6cf, 5.7—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/32e937dc6e97f5ed3cdfe3fc0b2b19a05e23fa44
git.kernel.orghttps://git.kernel.org/stable/c/144f88054ba0180467356f40895bd660b5dceeec
git.kernel.orghttps://git.kernel.org/stable/c/28c7cfaf0c0ab17cbd7754092116fd1af45271f9
git.kernel.orghttps://git.kernel.org/stable/c/54080355999381fed4a26129579a5765bab87491
git.kernel.orghttps://git.kernel.org/stable/c/5e7ece24c5cb75a60402aad4d803c7898ea40aa9
git.kernel.orghttps://git.kernel.org/stable/c/f5ef97c13165542480a6ffdbe6f09f40bbb7cbf1
git.kernel.orghttps://git.kernel.org/stable/c/f228b9ae2a7e84d1153616d8e71c4236cb1f1309
git.kernel.orghttps://git.kernel.org/stable/c/329f0b9b48ee6ab59d1ab72fef55fe8c6463a6cf
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-082556.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-019113.html

01 Record index

CVE-2026-23274

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2026-23274

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References