Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-98321

netfilter: nf_nat: unregister and release hooks on error

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat: unregister and release hooks on error If nf_hook_entries_insert_raw() fails, the NAT hooks get never released, resulting in a memleak. Postpone setting nat_proto_net->nat_hook_ops when the hooks are registered to simplify the error path to decide whether the nat hooks need unwinding.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 1cd472bf036ca038e783ef5f058f54e45b7e8180 to < 79084567cd082fb4482e1ea457580e7d6504dd99affected
  • 1cd472bf036ca038e783ef5f058f54e45b7e8180 to < df80342f4bfc023ad7d6703df5e27f583ff0cb8daffected
  • 1cd472bf036ca038e783ef5f058f54e45b7e8180 to < cbdd39ce42530a193c56beb206a3356cb6d01016affected

Linux Linux

Default version status: affected

  • 4.18affected
  • 0 to < 4.18unaffected
  • 6.18.54 to ≤ 6.18.*unaffected
  • 7.2.8 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References