Nftables

Linux nf_tables Catchall Set Element UAF -- Local Privilege Escalation (CVE-2026-23111)

CVE-2026-23111 is a use-after-free in the Linux nftables subsystem caused by an inverted genmask check in nftmapcatchallactivate(). During transaction abort, the handler skips inactive catchall elements that need reactivation and processes active ones that do…