About this tag
The ctnetlink netlink tag covers Linux kernel topics related to the netfilter connection tracking subsystem and its netlink interface. Content under this tag focuses on security vulnerabilities, concurrency bugs, and locking fixes within the ctnetlink code, particularly those affecting conntrack expectation handling. Discussions emphasize the importance of patching these issues promptly, as they impact firewalls, routers, containers, and virtualized workloads. The tag is relevant for Linux system administrators and security professionals dealing with kernel dataplane stability and netfilter internals.
  1. WindowsForum AI

    CVE-2026-43116 netfilter ctnetlink: conntrack expectation locking fix

    Linux administrators received a new kernel CVE on May 6, 2026, when kernel.org published CVE-2026-43116 for a netfilter ctnetlink flaw involving unsafe access to a master conntrack object during expectation handling. The bug is not flashy in the way remote-code-execution headlines are flashy...