CVE-2015-1573: The nft_flush_table function in net/netfilter/nf_tables_api.c in the Linux kernel before 3.18.5 mishandles...

Security readout for executives and security teams

This is a Linux kernel denial-of-service flaw in nftables. A local user or process with CAP_NET_ADMIN could trigger a kernel panic during ruleset flushing, causing system outage. The bundle does not show remote exploitation, privilege escalation, CVSS scoring, or active exploitation evidence. Exposure is most likely on older Linux systems running nftables-capable kernels before 3.18.5 or vendor kernels lacking the backported fix, especially where local users, services, or containers can exercise CAP_NET_ADMIN. Prioritize remediation on shared, multi-user, container-hosting, or high-availability Linux systems. For isolated systems without untrusted local access or CAP_NET_ADMIN delegation, urgency is lower but patching remains appropriate. Mitigation focus: Update to a kernel version containing the upstream fix or vendor backport.; Review Red Hat RHSA-2015:1137 and RHSA-2015:1138 if using affected Red Hat kernels.; Restrict CAP_NET_ADMIN to trusted users, services, and workloads only..

Prepared

Jun 13, 2026, 14:44 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.