CVE-2026-98491

A use-after-free (UAF) vulnerability exists in the Linux kernel within the Open vSwitch conntrack subsystem. When network packet buffers (skb ) containing shared unconfirmed connection tracking (ct) entries are cloned, they may be committed with conflicting extensions. This occurs because the fir...

CVE-2026-98491

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry In a case where skb with an unconfirmed ct entry gets cloned, we may end up committing both but with different sets of extensions. The series of events: 1...

EUVD-2026-103731

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry In a case where skb with an unconfirmed ct entry gets cloned, we may end up committing both but with different sets of extensions. The series of events: 1...

CVE-2026-98491 net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry In a case where skb with an unconfirmed ct entry gets cloned, we may end up committing both but with different sets of extensions. The series of events: 1...

CVE-2026-98490 net: openvswitch: conntrack: fix helper UAF due to extensions realloc

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: conntrack: fix helper UAF due to extensions realloc While calling the helpers, a raw pointer to the extensions area is wired into expectations list: - nfcthelper - helper-help - nfctexpectrelatedreport -...

CVE-2026-98490

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: conntrack: fix helper UAF due to extensions realloc While calling the helpers, a raw pointer to the extensions area is wired into expectations list: - nfcthelper - helper-help - nfctexpectrelatedreport -...

CVE-2026-98490 net: openvswitch: conntrack: fix helper UAF due to extensions realloc

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: conntrack: fix helper UAF due to extensions realloc While calling the helpers, a raw pointer to the extensions area is wired into expectations list: - nfcthelper - helper-help - nfctexpectrelatedreport -...

CVE-2026-98490

A use-after-free (UAF) vulnerability exists in the Linux kernel 's Open vSwitch conntrack subsystem. The flaw occurs because a raw pointer to the extensions area is added to the expectations list during helper calls. If additional extensions are added via *_ext_add() calls before a connection is ...

EUVD-2026-103730

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: conntrack: fix helper UAF due to extensions realloc While calling the helpers, a raw pointer to the extensions area is wired into expectations list: - nfcthelper - helper-help - nfctexpectrelatedreport -...

CLSA-2023-1683146027 kernel: Fix of 24 CVEs

media: rc: Fix use-after-free bugs caused by enetxirqsim CVE-2023-1118 - net: mpls: fix stale pointer if allocation fails during device rename CVE-2023-26545 - net/ulp: prevent ULP without clone op from entering the LISTEN status CVE-2023-0461 - Bluetooth: L2CAP: Fix u8 overflow CVE-2022-45934 -...

CLSA-2023-1683229770 kernel: Fix of 24 CVEs

media: rc: Fix use-after-free bugs caused by enetxirqsim CVE-2023-1118 - net: mpls: fix stale pointer if allocation fails during device rename CVE-2023-26545 - net/ulp: prevent ULP without clone op from entering the LISTEN status CVE-2023-0461 - Bluetooth: L2CAP: Fix u8 overflow CVE-2022-45934 -...

PT-2026-116710

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the openvswitch conntrack component where a shared unconfirmed connection tracking ct entry can be modified. When a socket buffer skb with an unconfirmed ct entry is...

Linux Distros Unpatched Vulnerability : CVE-2026-98490

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: openvswitch: conntrack: fix helper UAF due to extensions realloc While calling the helpers, a raw pointer to the extensions area is wired into expectations...

PT-2026-116709

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the openvswitch conntrack component. The problem occurs when a raw pointer to the extensions area is stored in the expectations list during the...

CVE-2026-98490: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: conntrack: fix helper UAF due to extensions realloc While calling the helpers, a raw pointer to the extensions area is wired into expectations list: - nfcthelper - helper-help - nfctexpectrelatedreport -...

CVE-2026-98491: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry In a case where skb with an unconfirmed ct entry gets cloned, we may end up committing both but with different sets of extensions. The series of events: 1...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.3 contains a security vulnerability. This vulnerability arises from the openvswitch conntrack process modifying the shared extension pointer when handling unconfirmed CT entries for clones, which may lead to reuse after release...

Oracle Linux 8 : kernel (ELSA-2026-82807)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-82807 advisory. - drm/amdkfd: Add TLB flush after MES queue eviction/suspension Jocelyn Falempe RHEL-262108 CVE-2026-89811 - drm/amd/display: set newstream to NULL...

Rocky Linux 8 [CIQ] Security Update: kernel-rt / kernel-rt-core / kernel-rt-debug / kernel-rt-debug-core / etc Multiple Vulnerabilities (crlsa-2026_82806)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202682806 advisory. kernel: openvswitch: defer tunnel netdevput to RCU release CVE-2026-31678 kernel: ipv6: validate extension header length before copying to cmsg...

MiracleLinux 8 : kernel-4.18.0-553.173.1.el8_10 (AXSA:2026-2075:102)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2075:102 advisory. kernel: openvswitch: defer tunnel netdevput to RCU release CVE-2026-31678 kernel: ipv6: validate extension header length before copying to cmsg...