conntrack

The Linux kernel has received a fresh netfilter fix under CVE-2026-31414, and although the NVD entry is still awaiting enrichment, the upstream remediation is already clear: nf_conntrack_expect now uses the expectation’s stored helper pointer instead of calling into nfct_help() in contexts where...

CVE-2023-7192 is a memory-management bug in the Linux kernel’s netfilter conntrack netlink path that can leak references and eventually cause a denial-of-service (DoS) condition; the flaw lives in ctnetlink_create_conntrack (net/netfilter/nf_conntrack_netlink.c) and can be triggered by a local...