Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-98873

netfilter: nf_conntrack_expect: zero at allocation time

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_expect: zero at allocation time There are occasional LLM hints wrt. leaking uninitialized data to userspace via ctnetlink. Just zero at allocation time, expectations are not frequently used these days. Intentionally keeps _init as-is because we could theoretically support re-init, so add the missing exp->dir there.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 076a0ca02644657b13e4af363f487ced2942e9cb to < 39cb6ff947c16a576ea68c5f272e634acdcb0085affected
  • 076a0ca02644657b13e4af363f487ced2942e9cb to < 90545aa07a183887e9d72ce573c18e08f62e2c91affected
  • 076a0ca02644657b13e4af363f487ced2942e9cb to < 9c11d7ea5ff4dbe162e79f00188814ef5483c295affected
  • 076a0ca02644657b13e4af363f487ced2942e9cb to < b7f3ee925aee9f1f547d539bc03c35433c238958affected
  • 076a0ca02644657b13e4af363f487ced2942e9cb to < 824397af7bfe14edad374c64253dae0187ca623daffected
  • 076a0ca02644657b13e4af363f487ced2942e9cb to < a39ecb856514274c80d0fac4d128dba6b266a8edaffected
  • 076a0ca02644657b13e4af363f487ced2942e9cb to < 241ccd2fed9051db443aadce248fc0ab30f55e97affected

Linux Linux

Default version status: affected

  • 3.4affected
  • 0 to < 3.4unaffected
  • 5.10.271 to ≤ 5.10.*unaffected
  • 5.15.222 to ≤ 5.15.*unaffected
  • 6.1.189 to ≤ 6.1.*unaffected
  • 6.6.158 to ≤ 6.6.*unaffected
  • 6.12.111 to ≤ 6.12.*unaffected
  • 6.18.53 to ≤ 6.18.*unaffected
  • 7.2 to ≤ *unaffected

References