CVE-2026-80664

In the Linux kernel, the following vulnerability has been resolved: netfilter: xtnat: reject unsupported target families xtnat SNAT and DNAT target handlers assume IP-family conntrack state is present and can dereference a NULL pointer when instantiated from an unsupported family through nftcompa...

CVE-2026-80664

CVE-2026-80664 affects the Linux kernel netfilter subsystem, specifically the xt_nat SNAT and DNAT target handlers. The root cause is a NULL pointer dereference in nf_nat_setup_info() when a rule is instantiated from an unsupported address family via nft_compat (e.g., a bridge-family compat rule)...

EUVD-2026-67540

In the Linux kernel, the following vulnerability has been resolved: netfilter: xtnat: reject unsupported target families xtnat SNAT and DNAT target handlers assume IP-family conntrack state is present and can dereference a NULL pointer when instantiated from an unsupported family through nftcompa...