01 Record

CVE-2026-45897

netfilter: nft_counter: serialize reset with spinlock

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

netfilter: nft_counter: serialize reset with spinlock

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.16% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 5.1% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-09-14.
Red Hat severity: Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published: 2026-05-27 12:17Z5 MO AGO
Last updated: 2026-09-14 11:58Z1 MO AGO
Reserved: 2026-05-13
Assigning CNA: Linux
Record state: PUBLISHED
Severity: Not rated by the issuing CNA
CNA CVSS vector: Not published by the issuing CNA
Weaknesses: No CWE assigned
Data version: 5.2
Document digest: f24fbd148735970ba2016a6857d44720058187ef7e35f31291d9d723e46b4903

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxfb1adb05ea87b6149e65a31e511756c4f470d0cd to < e13194e60217db02c2e7202375d9e5951267d87b, f123293db16dcd0cd81b246ae60e6362f0025d0a to < de6601f1374fab124cd9276df6671f64d940ceb4, 3cb03edb4de33fd04c4ea55f47397b96a8657c53 to < 48cf7918d10c66cb6b05226fa3fa5daf0c891089, 3cb03edb4de33fd04c4ea55f47397b96a8657c53 to < cd968dcdec6aee79a2d399e4f6e0eca63c3b45e1, 3cb03edb4de33fd04c4ea55f47397b96a8657c53 to < 0cdc6d5a26f2d1f7f15a43526841b679445c32e2, 3cb03edb4de33fd04c4ea55f47397b96a8657c53 to < 779c60a5190c42689534172f4b49e927c9959e4e, 6.1.107 to < 6.1.188, 6.6.48 to < 6.6.157, 6.7—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/e13194e60217db02c2e7202375d9e5951267d87b
git.kernel.orghttps://git.kernel.org/stable/c/de6601f1374fab124cd9276df6671f64d940ceb4
git.kernel.orghttps://git.kernel.org/stable/c/48cf7918d10c66cb6b05226fa3fa5daf0c891089
git.kernel.orghttps://git.kernel.org/stable/c/cd968dcdec6aee79a2d399e4f6e0eca63c3b45e1
git.kernel.orghttps://git.kernel.org/stable/c/0cdc6d5a26f2d1f7f15a43526841b679445c32e2
git.kernel.orghttps://git.kernel.org/stable/c/779c60a5190c42689534172f4b49e927c9959e4e

07 Fixed in

Debian 12

linux
Fixed in 6.1.190-1
linux-6.12
Fixed in 6.12.101-1~deb12u1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.101-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.19.6-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.