CVE-2026-74621

CVE-2026-74621 is an unbounded memory leak in the Linux kernel's net/sched: act_ct (traffic control connection tracking action). When tcf_ct_handle_fragments() rejects a packet due to failed header sanity checks (e.g., -EINVAL, -ENOMEM, -EPROTO), the sk_buff is not freed or queued, yet tcf_ct_act...

CVE-2026-74621 net/sched: act_ct: fix sk_buff leak when the header checks reject a packet

In the Linux kernel, the following vulnerability has been resolved: net/sched: actct: fix skbuff leak when the header checks reject a packet tcfcthandlefragments runs its header sanity checks before handing anything to the defragmentation engine: if family == NFPROTOIPV4 err =...