SUSE CVE-2026-74569

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntracksip: widen NAT rewrite delta to s32 in siphelptcp siphelptcp stores the size change of each NAT-rewritten SIP message in s16 diff and accumulates it in s16 tdiff, but a single message can grow by more than...

CVE-2026-72251

A flaw was found in the Linux kernel's netfilter subsystem, specifically within the Session Initiation Protocol SIP Network Address Translation NAT helper. This vulnerability occurs when a cloned packet buffer SKB is reallocated, but the system fails to update the data pointer, leading to the use...

Linux Distros Unpatched Vulnerability : CVE-2026-72251

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nfnatsip: reload possible stale data pointer quoting sashiko: ------------------------------------------------------------------------ .. noticed a...

UBUNTU-CVE-2026-74569

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntracksip: widen NAT rewrite delta to s32 in siphelptcp siphelptcp stores the size change of each NAT-rewritten SIP message in s16 diff and accumulates it in s16 tdiff, but a single message can grow by more than...

CVE-2026-74569

CVE-2026-74569 affects the Linux kernel netfilter nf_conntrack_sip path. The issue stems from NAT rewrite delta handling in sip_help_tcp(), where diff/tdiff was stored in 16-bit fields and could overflow within large SIP messages, causing a read past the skb tail. The fix widens diff, tdiff, and ...

CVE-2026-74569 netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp()

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntracksip: widen NAT rewrite delta to s32 in siphelptcp siphelptcp stores the size change of each NAT-rewritten SIP message in s16 diff and accumulates it in s16 tdiff, but a single message can grow by more than...

CVE-2026-72251

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnatsip: reload possible stale data pointer quoting sashiko: ------------------------------------------------------------------------ .. noticed a potential memory bug and header corruption involving the SIP NAT helpe...

UBUNTU-CVE-2026-72251

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnatsip: reload possible stale data pointer quoting sashiko: ------------------------------------------------------------------------ .. noticed a potential memory bug and header corruption involving the SIP NAT helpe...

CVE-2026-72251 netfilter: nf_nat_sip: reload possible stale data pointer

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnatsip: reload possible stale data pointer quoting sashiko: ------------------------------------------------------------------------ .. noticed a potential memory bug and header corruption involving the SIP NAT helpe...

CVE-2026-72251

CVE-2026-72251 concerns the Linux kernel netfilter nf_nat_sip path. The issue is a memory-pointer/buffer handling flaw: if skb_ensure_writable() reallocates a cloned/fragmented skb, nf_nat_sip() may not update the destination pointer (dptr ) to the new buffer, risking a stale data pointer and pot...

CVE-2026-72251 netfilter: nf_nat_sip: reload possible stale data pointer

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnatsip: reload possible stale data pointer quoting sashiko: ------------------------------------------------------------------------ .. noticed a potential memory bug and header corruption involving the SIP NAT helpe...

PT-2026-73021

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter module where the sip help tcp function uses signed 16-bit integers s16 for the diff and tdiff variables to track size changes in NAT-rewritten SIP...

CVE-2010-2831

Unspecified vulnerability in the NAT for SIP implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1 allows remote attackers to cause a denial of service device reload via transit traffic on UDP port 5060, aka Bug ID CSCtf17624...