CVE-2026-72430

The CVE-2026-72430 issue affects the Linux kernel net/sched code (act_ct) where tcf_ct_fill_params() calls nf_connlabels_get() and later paths skip proper cleanup, causing nf_connlabels leaks on two error paths. Each failed RTM_NEWACTION in a network namespace can increment net->ct.labels_used...

PT-2026-72618

In the Linux kernel, the following vulnerability has been resolved: net/sched: act ct: fix nf connlabels leak on two error paths tcf ct fill params calls nf connlabels get setting put labels when TCA CT LABELS is present, but two later error sites use a bare return instead of "goto err", skipping...