PT-2026-117012

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter BPF component where the bpf ct set nat info function fails to validate the NAT manipulation type. This allows an incorrect value to be passed to the nf n...

PT-2026-115799

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf nat: unregister and release hooks on error If nf hook entries insert raw fails, the NAT hooks get never released, resulting in a memleak. Postpone setting nat proto net-nat hook ops when the hooks are registered to...

PT-2026-106651

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description An issue exists in the netfilter module where the nft nat setup netmap function fails to fully initialize the new addr variable within an on-stack nf inet addr union during IPv4 mapping...

PT-2026-106650

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description A memory leak occurs in the netfilter nf nat component when the nf hook entries insert raw function fails, as the NAT hooks are not properly released. This issue is addressed by postponing...

PT-2026-98827

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter module where the nf nat sip component fails to correctly adjust the offset when Network Address Translation NAT changes the packet length. Specifically,...

PT-2026-72439

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory bug and header corruption issue exists in the SIP NAT helper within the netfilter component. In the nf nat sip function, if a cloned or fragmented socket buffer SKB is reallocat...

PT-2026-72607

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter module where the nf nat component may use an invalid nat net pointer following a failed nf nat init call. This can lead to an invalid memory access withi...

PT-2026-121258

Уязвимость компонента net/netfilter/nf nat sip.c ядра операционной системы Linux связана с недостаточным контролем ресурса в период его существования. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, оказать воздействие на конфиденциальность, целостность и доступность...

PT-2026-120414

Уязвимость функции nf nat register fn компонента net/netfilter/nf nat core.c ядра операционной системы Linux связана с выходом операции за границы буфера. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации...

DEBIAN-CVE-2024-50212

In the Linux kernel, the following vulnerability has been resolved: lib: alloctagmoduleunload must wait for pending kfreercu calls Ben Greear reports following splat: ------------ cut here ------------ net/netfilter/nfnatcore.c:1114 module nfnat func:nfnatregisterfn has 256 allocated at module...

PT-2024-34048

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability has been resolved in the Linux kernel where the alloc tag module unload function must wait for pending kfree rcu calls. This issue occurs when the nf nat module exit...

Linux kernel denial of service vulnerability (CNVD-2016-01041)

The Linux kernel is an open source, free operating system kernel originally done by Linus Torvalds. A security vulnerability exists in the 'nfnatredirectipv4' function in the net/netfilter/nfnatredirect.c file in versions of Linux kernel prior to 4.4. A remote attacker can exploit this...