CVE-2026-74715 bpf: Fix netns reference imbalance in conntrack kfuncs

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix netns reference imbalance in conntrack kfuncs The opts argument of the BPF conntrack kfuncs can point to a shared map value. bpfnfctlookup and bpfnfctallocentry read opts-netnsid separately when acquiring and releasing t...

CVE-2026-74715 bpf: Fix netns reference imbalance in conntrack kfuncs

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix netns reference imbalance in conntrack kfuncs The opts argument of the BPF conntrack kfuncs can point to a shared map value. bpfnfctlookup and bpfnfctallocentry read opts-netnsid separately when acquiring and releasing t...

EUVD-2026-64402

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix netns reference imbalance in conntrack kfuncs The opts argument of the BPF conntrack kfuncs can point to a shared map value. bpfnfctlookup and bpfnfctallocentry read opts-netnsid separately when acquiring and releasing t...

CVE-2026-74715

CVE-2026-74715 is a race condition in the Linux kernel BPF conntrack kfuncs (__bpf_nf_ct_lookup() and __bpf_nf_ct_alloc_entry()). The opts argument can reference a shared BPF map value, and opts->netns_id is read independently during namespace reference acquisition and release. A concurrent wr...

CVE-2026-74625 netfilter: bridge: release template ct on non-IP path

In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: release template ct on non-IP path A bridge nftables ct zone set rule can attach a conntrack template to an skb before nfctbridgepre sees it. For non-IPv4 and non-IPv6 EtherTypes, nfctbridgepre currently...

CVE-2026-74624 netfilter: nf_conntrack: defer invalid log until after unlock

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrack: defer invalid log until after unlock TCP and SCTP conntrack paths can emit invalid-packet logs while ct-lock is still held. When invalid logging is routed to nfnetlinklog and conntrack export is enabled, t...

EUVD-2026-64562

In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: release template ct on non-IP path A bridge nftables ct zone set rule can attach a conntrack template to an skb before nfctbridgepre sees it. For non-IPv4 and non-IPv6 EtherTypes, nfctbridgepre currently...

CVE-2026-74625

A memory leak vulnerability in the Linux kernel netfilter bridge component affects systems with a bridge nftables ct zone set rule. When non-IPv4 and non-IPv6 EtherType frames are processed, nf_ct_bridge_pre() overwrites skb->_nfct with IP_CT_UNTRACKED without releasing the existing conntrack ...

CVE-2026-74625 netfilter: bridge: release template ct on non-IP path

In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: release template ct on non-IP path A bridge nftables ct zone set rule can attach a conntrack template to an skb before nfctbridgepre sees it. For non-IPv4 and non-IPv6 EtherTypes, nfctbridgepre currently...

Linux Distros Unpatched Vulnerability : CVE-2026-74715

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Fix netns reference imbalance in conntrack kfuncs The opts argument of the BPF conntrack kfuncs can point to a shared map value. bpfnfctlookup and...

Linux Distros Unpatched Vulnerability : CVE-2026-74625

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: bridge: release template ct on non-IP path A bridge nftables ct zone set rule can attach a conntrack template to an skb before nfctbridgepre sees it...

PT-2026-79720

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix netns reference imbalance in conntrack kfuncs The opts argument of the BPF conntrack kfuncs can point to a shared map value. bpf nf ct lookup and bpf nf ct alloc entry read opts-netns id separately when acquiring and...

PT-2026-79630

In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: release template ct on non-IP path A bridge nftables ct zone set rule can attach a conntrack template to an skb before nf ct bridge pre sees it. For non-IPv4 and non-IPv6 EtherTypes, nf ct bridge pre currently...

PT-2026-79629

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf conntrack: defer invalid log until after unlock TCP and SCTP conntrack paths can emit invalid-packet logs while ct-lock is still held. When invalid logging is routed to nfnetlink log and conntrack export is enabled,...

CVE-2026-72256

A flaw was found in the Linux kernel. The xtcluster module, specifically within the xtclustermt function, incorrectly processes template connection tracking conntrack objects. This state confusion occurs when a template conntrack is attached before it is fully initialized, leading to xtclusterhas...

CVE-2026-72423

A flaw was found in the Linux kernel. The BPF Berkeley Packet Filter subsystem's conntrack connection tracking functionality contains an out-of-bounds write vulnerability. This occurs because the system does not properly validate the size of an options structure when reporting errors in conntrack...

Linux Distros Unpatched Vulnerability : CVE-2026-72256

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: xtcluster: reject template conntracks in hash match xtclustermt treats any non-NULL nfctget result as a fully initialized conntrack and passes it to...

CVE-2026-72247

A flaw was found in the Linux kernel's netfilter nfconncount component. An incorrect comparison of conntrack zones in the connection counting logic can cause different zones to be treated as equal. This miscalculation in connection deduplication may lead to connection limits not being properly...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099988)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099988 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check An...

EUVD-2026-59657

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix skb leak on flow key update failure during ct ovsctexecute always steals or frees the skb on failure while ovsflowkeyupdate does not. So, if it fails and we return right away, the skb ends up leaked. Fix tha...