Back Securityaffairs.Co

CVE-2026-23111: Linux nf_tables Flaw Enables Root Exploits

Securityaffairs.Co •Pierluigi Paganini • June 9, 2026

A Linux kernel nf_tables bug lets local users gain root via use-after-free caused by a logic error; patch removes a single “!”. CVE-2026-23111 lives in nf_tables, the Linux kernel’s packet filtering framework. Exodus Intelligence researcher Oliver Sieber found the bug in early 2025 and chained it into a full local privilege escalation. The flaw was […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Linux Kernel CVE-2026-23111 Enables Local Privilege Escalation via nftables A use-after-free vulnerability in the Linux kernel's nftables subsystem, tracked as CVE-2026-23111, allows local attackers to escalate privileges to root. Discovered in early 2025, the flaw was patched on February 5, 2026. It affects widely used distributions including Debian Bookworm, Debian Trixie, Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS. The vulnerability is exploited by leveraging a logic error in the code, which has been demonstrated in a proof of concept released on June 9, 2026. Security researchers from Exodus Intelligence conducted a detailed analysis and exploitation of this vulnerability. The flaw poses a significant risk to systems running affected Linux distributions, especially in environments where local access is possible. 4 sources 74

Extracted Entities

CVE-2026-23111: Linux nf_tables Flaw Enables Root Exploits

The full story

Extracted Entities

CVEs (1)

CWE Weaknesses (1)

Platforms (1)