CVE-2026-98321netfilter: nf_nat: unregister and release hooks on error
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat: unregister and release hooks on error If nf_hook_entries_insert_raw() fails, the NAT hooks get never released, resulting in a memleak. Postpone setting nat_proto_net->nat_hook_ops when the hooks are registered to simplify the error path to decide whether the nat hooks need unwinding.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 6, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 1cd472bf036ca038e783ef5f058f54e45b7e8180 before 79084567cd082fb4482e1ea457580e7d6504dd99; from 1cd472bf036ca038e783ef5f058f54e45b7e8180 before df80342f4bfc023ad7d6703df5e27f583ff0cb8d; from 1cd472bf036ca038e783ef5f058f54e45b7e8180 before cbdd39ce42530a193c56beb206a3356cb6d01016 | CNA record |
References
- https://git.kernel.org/stable/c/79084567cd082fb4482e1ea457580e7d6504dd99
- https://git.kernel.org/stable/c/df80342f4bfc023ad7d6703df5e27f583ff0cb8d
- https://git.kernel.org/stable/c/cbdd39ce42530a193c56beb206a3356cb6d01016
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.