Memory Allocation Issue in Linux Kernel's Netfilter Component

CVE-2026-80744

What is CVE-2026-80744?

A vulnerability in the Linux kernel's netfilter component has been identified related to the handling of memory allocation failures. Particularly, in the function 'nft_flow_rule_offload_abort', a warning is incorrectly triggered for memory allocation failures (ENOMEM) during rollback operations, which are expected under low-memory conditions. This leads to unnecessary alerts about potential kernel bugs when the root cause is merely system memory pressure. The introduced fix resolves this by refining the warning condition, ensuring that only unintended errors result in warnings, aligning the behavior with common kernel practices.

References