---
id: 6167
title: "CVE-2026-23412 — Linux Kernel Netfilter BPF Hook Use-After-Free LPE"
cve: CVE-2026-23412
source_domain: aretiq.ai
source_url: "https://aretiq.ai/research/vul260518-cve-2026-23412-linux-kernel-netfilter-bpf-hook-use-after-free-lpe/"
published_at: "2026-05-18T00:00:00Z"
tags: ["vulnerability-research", "privilege-escalation", "use-after-free", "linux-kernel", "bpf", "netfilter", "cve-2026-23412"]
phying_url: "https://phying.com/item/6167"
lang: en
---

# CVE-2026-23412 — Linux Kernel Netfilter BPF Hook Use-After-Free LPE

## Summary

CVE-2026-23412: a use-after-free in Linux's BPF netfilter links—synchronous deallocation racing hook enumeration—enables local privilege escalation via heap spray; fixed in 7.0-rc5.

## Intelligence Metadata

- **Sources:** aretiq.ai
- **CVE:** CVE-2026-23412
- **Published:** 2026-05-18T00:00:00Z
- **Original:** https://aretiq.ai/research/vul260518-cve-2026-23412-linux-kernel-netfilter-bpf-hook-use-after-free-lpe/
- **Phying News:** https://phying.com/item/6167