ctnetlink

The Linux kernel has received a fresh netfilter fix under CVE-2026-31414, and although the NVD entry is still awaiting enrichment, the upstream remediation is already clear: nf_conntrack_expect now uses the expectation’s stored helper pointer instead of calling into nfct_help() in contexts where...