CVE-2026-97616

The Linux kernel contains a memory leak vulnerability within the net/sched: act_api component. During a batched RTM_NEWACTION request, tcf_idr_check_alloc() takes a temporary reference on an action. If a subsequent action fails to initialize, tcf_action_destroy() uses strict release semantics tha...

CVE-2026-72430

The CVE-2026-72430 issue affects the Linux kernel net/sched code (act_ct) where tcf_ct_fill_params() calls nf_connlabels_get() and later paths skip proper cleanup, causing nf_connlabels leaks on two error paths. Each failed RTM_NEWACTION in a network namespace can increment net->ct.labels_used...

CVE-2026-72430: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/sched: actct: fix nfconnlabels leak on two error paths tcfctfillparams calls nfconnlabelsget setting putlabels when TCACTLABELS is present, but two later error sites use a bare return instead of "goto err", skipping the err:...

PT-2026-72618

In the Linux kernel, the following vulnerability has been resolved: net/sched: act ct: fix nf connlabels leak on two error paths tcf ct fill params calls nf connlabels get setting put labels when TCA CT LABELS is present, but two later error sites use a bare return instead of "goto err", skipping...