A vulnerability described as critical has been identified in Linux Kernel up to 6.18.18/6.19.8/7.0-rc3. The affected element is the function
mod_timer of the component netfilter. Such manipulation leads to uninitialized pointer.
This vulnerability is listed as CVE-2026-23274. The attack must be carried out from within the local network. There is no available exploit.
Upgrading the affected component is recommended.