netfilter: nf_conncount: fix leaked ct in error paths (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.29 % · percentile 21 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Modified
Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: fix leaked ct in error paths There are some situations where ct might be leaked as error paths are skipping the refcounted check and return immediately. In order to solve it make sure that the check is always called.
Weaknesses (CWE)
- CWE-401 — Missing Release of Memory after Effective Lifetime
References
- https://git.kernel.org/stable/c/08fa37f4c8c59c294e9c18fea2d083ee94074e5a
- https://git.kernel.org/stable/c/e1ac8dce3a893641bef224ad057932f142b8a36f
- https://git.kernel.org/stable/c/f381a33f34dda9e4023e38ba68c943bca83245e9
- https://git.kernel.org/stable/c/325eb61bb30790ea27782203a17b007ce1754a67
- https://git.kernel.org/stable/c/0b88be7211d21a0d68bb1e56dc805944e3654d6f
- https://git.kernel.org/stable/c/4bd2b89f4028f250dd1c1625eb3da1979b04a5e8
- https://git.kernel.org/stable/c/2e2a720766886190a6d35c116794693aabd332b6
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | Linux |
| CVSS 3.1 | HIGH 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | NVD · 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Secondary) |
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2026-4412
- GCVE · GCVE-0-2025-71146
CERT-FR advisories
- CERTFR-2026-AVI-0495 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0453 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0166 — Multiples vulnérabilités dans le noyau Linux de Debian · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.17.13 < 6.18cpe:2.3:o:linux:linux_kernel:6.12.63:*:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.18.2:*:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected 6e86f0eca857ee42787e30e9ec0b726aebfcae0a < 08fa37f4c8c59c294e9c18fea2d083ee94074e5a ; affected b160895d6bc9690459b16ef87799c9bd456af3ec < e1ac8dce3a893641bef224ad057932f142b8a36f ; affected 8d5a2c94c24dcc226863a7c2b5034750370c2189 < f381a33f34dda9e4023e38ba68c943bca83245e9 ; affected da9f247fb5efcd5a2730cdc989291b383c439e10 < 325eb61bb30790ea27782203a17b007ce1754a67 ; affected 3558faee8aace3541189c3a2ca45c7e85e144b44 < 0b88be7211d21a0d68bb1e56dc805944e3654d6f ; affected f6904ed15ed1a188543057e3cb0d02daa80edfc9 < 4bd2b89f4028f250dd1c1625eb3da1979b04a5e8 |
| Linux · Linux | affected 6.12.63 < 6.12.64 ; affected 6.18.2 < 6.18.3 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |