Black & White Path

Aug 28, 2026 · Information Security

A Single Missing ‘!’ in nf_tables Triggers Full Root Compromise (CVE‑2026‑23111)

CVE‑2026‑23111 is a local privilege escalation in the Linux kernel’s nf_tables subsystem caused by a reversed conditional in nft_map_catchall_activate(), where the absence of a ‘!’ leads to a use‑after‑free, enabling an attacker to chain UAF, leak kernel addresses, build a ROP payload and gain root.