sdp conntrack

CVE-2026-31427 is a small-looking Linux kernel bug with an outsized lesson: a stack variable meant to carry RTP address state can remain uninitialized, then get handed to the SIP NAT helper and used to rewrite SDP fields with whatever happens to be in memory. In the common case where stack...