CVE-2026-98322

The Linux kernel contains a vulnerability in netfilter: nft_nat where the nft_nat_setup_netmap() function fails to fully initialize the new_addr variable. Specifically, for IPv4 mapping , only the 4-byte .ip member is written to an on-stack union nf_inet_addr. However, the code subsequently copie...

EUVD-2026-93307

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftnat: fully initialise newaddr in netmap setup nftnatsetupnetmap builds the mapped address in an on-stack union nfinetaddr. For an IPv4 mapping it writes only the 4-byte .ip member and the loop runs a single 32-bit...