CVE-2026-64150

Critical · 9.8

CVSS

9.8

EPSS

0.6%

Published

Jul 19, 2026

CISA due date

—

The record

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: release local_lock before re-enabling softirqs Quoting sashiko: In the error path, local_bh_enable() is called before local_unlock_nested_bh().

Affected packages

Ecosystem	Package	Introduced	Fixed