CVE-2026-100070

The Linux kernel contains a vulnerability in netfilter: nf_nat_sip where the rewind offset is incorrectly calculated when Network Address Translation (NAT) shrinks a packet. Specifically, if map_addr() changes the packet length (e.g., a shorter public NAT IP), the coff variable remains relative t...