netfilter: nf_tables: fix use-after-free in nf_tables_addchain()
CVE-2026-23231
Scope
What the vendor says is affected
- cbl2 azcopy 10.25.1-6 on CBL Mariner 2.0
- azl3 azcopy 10.25.1-4 on Azure Linux 3.0
- azl3 azurelinux-image-tools 1.2.0-1 on Azure Linux 3.0
- cbl2 cri-tools 1.29.0-9 on CBL Mariner 2.0
- azl3 cf-cli 8.7.11-5 on Azure Linux 3.0
- azl3 containerized-data-importer 1.62.0-2 on Azure Linux 3.0
- azl3 coredns 1.11.4-14 on Azure Linux 3.0
- azl3 docker-cli 25.0.7-2 on Azure Linux 3.0
- cbl2 git-lfs 3.5.1-6 on CBL Mariner 2.0
- azl3 etcd 3.5.21-1 on Azure Linux 3.0
- azl3 flannel 0.24.2-24 on Azure Linux 3.0
- cbl2 kata-containers 3.2.0.azl2-7 on CBL Mariner 2.0
- cbl2 kata-containers-cc 3.2.0.azl2-8 on CBL Mariner 2.0
- cbl2 kubevirt 0.59.0-38 on CBL Mariner 2.0
- cbl2 moby-containerd 1.6.26-13 on CBL Mariner 2.0
- cbl2 moby-containerd-cc 1.7.7-13 on CBL Mariner 2.0
- cbl2 multus 4.0.2-10 on CBL Mariner 2.0
- cbl2 node-problem-detector 0.8.17-7 on CBL Mariner 2.0
- azl3 kata-containers 3.19.1.kata2-6 on Azure Linux 3.0
- cbl2 opa 0.63.0-6 on CBL Mariner 2.0
- azl3 kube-vip-cloud-provider 0.0.10-5 on Azure Linux 3.0
- azl3 kubevirt 1.7.0-3 on Azure Linux 3.0
- azl3 libcontainers-common 20240213-3 on Azure Linux 3.0
- azl3 moby-containerd-cc 1.7.7-10 on Azure Linux 3.0
Versions the vendor lists as fixed
- 1.2.0-2
- 2.22.0-2
Next step
What the vendor recommends
CBL-Mariner Releases
Review the complete instructions on the vendor's siteTimeline
When this advisory changed
- Published by Microsoft Security Response Center
The publication date reported by the vendor.
- Updated by Microsoft Security Response Center
The vendor changed the advisory after it was first published.
- Added to SecurityAlert
We collected the advisory from the official source.
Vulnerabilities