CVE-2026-23016

A flaw was found in the Linux kernel's network connection tracking conntrack subsystem. A local user could exploit this by sending specially crafted fragmented network packets. This improper management of connection tracking references can prevent the conntrack module from properly releasing...

DEBIAN-CVE-2026-23016

In the Linux kernel, the following vulnerability has been resolved: inet: frags: drop fraglist conntrack references Jakub added a warning in nfconntrackcleanupnetlist to make debugging leaked skbs/conntrack references more obvious. syzbot reports this as triggering, and I can also reproduce this...