PT-2026-72444

In the Linux kernel, the following vulnerability has been resolved: netfilter: xt cluster: reject template conntracks in hash match xt cluster mt treats any non-NULL nf ct get result as a fully initialized conntrack and passes it to xt cluster hash. This causes a state confusion bug when the raw...