The vulnerability of the decode_int() function in the net/netfilter/nf_conntrack_h323_asn1.c module of the netfilter component in the Linux operating system allows a attacker to compromise the confidentiality and accessibility of protected information.

The vulnerability of the decodeint function in the net/netfilter/nfconntrackh323asn1.c module of the netfilter component in the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality...

Linux Distros Unpatched Vulnerability : CVE-2026-23456

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nfconntrackh323: fix OOB read in decodeint CONS case In decodeint, the CONS case calls getbitsbs, 2 to read a length value, then calls getuintbs, len...

CVE-2026-23456 netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrackh323: fix OOB read in decodeint CONS case In decodeint, the CONS case calls getbitsbs, 2 to read a length value, then calls getuintbs, len without checking that len bytes remain in the buffer. The existing...