Exploitation Risk in Linux Kernel Netfilter by Vendor Linux

CVE-2026-43026

What is CVE-2026-43026?

A vulnerability in the Linux kernel's netfilter component can lead to the exposure of stale NAT-related data. When the CTA_EXPECT_NAT field is absent from a netlink message, expectations allocated via ctnetlink_alloc_expect() may not correctly initialize fields, allowing stale data to be sent to userspace. This flaw could potentially be exploited to leak sensitive information or mislead users about the state of network connections. Proper handling of NAT fields is critical to maintaining data integrity.

References