CVE-2026-98321

Full vulnerability record from the local CVENow database.

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat: unregister and release hooks on error If nf_hook_entries_insert_raw() fails, the NAT hooks get never released, resulting in a memleak. Postpone setting nat_proto_net->nat_hook_ops when the hooks are registered to simplify the error path to decide whether the nat hooks need unwinding.

Severity

Not scored

CVSS score

Not available

Vulnerability status

Received

Source identifier

416baaa9-dc9f-4396-8d5f-8c081fb06d67

Published

2026-10-06 09:18:24.117000

Last modified

2026-10-19 10:18:34.267000

View original CVE JSON

{
  "id": "CVE-2026-98321",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "published": "2026-10-06T09:18:24.117",
  "lastModified": "2026-10-19T10:18:34.267",
  "vulnStatus": "Received",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_nat: unregister and release hooks on error\n\nIf nf_hook_entries_insert_raw() fails, the NAT hooks get never released,\nresulting in a memleak.\n\nPostpone setting nat_proto_net->nat_hook_ops when the hooks are\nregistered to simplify the error path to decide whether the nat hooks\nneed unwinding."
    }
  ],
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "programFiles": [
            "net/netfilter/nf_nat_core.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "versions": [
            {
              "version": "1cd472bf036ca038e783ef5f058f54e45b7e8180",
              "lessThan": "79084567cd082fb4482e1ea457580e7d6504dd99",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "1cd472bf036ca038e783ef5f058f54e45b7e8180",
              "lessThan": "df80342f4bfc023ad7d6703df5e27f583ff0cb8d",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "1cd472bf036ca038e783ef5f058f54e45b7e8180",
              "lessThan": "cbdd39ce42530a193c56beb206a3356cb6d01016",
              "versionType": "git",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "programFiles": [
            "net/netfilter/nf_nat_core.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "versions": [
            {
              "version": "4.18",
              "status": "affected"
            },
            {
              "version": "0",
              "lessThan": "4.18",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.18.54",
              "lessThanOrEqual": "6.18.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "7.2.8",
              "lessThanOrEqual": "7.2.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "7.3",
              "lessThanOrEqual": "*",
              "versionType": "original_commit_for_fix",
              "status": "unaffected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/79084567cd082fb4482e1ea457580e7d6504dd99",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/cbdd39ce42530a193c56beb206a3356cb6d01016",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/df80342f4bfc023ad7d6703df5e27f583ff0cb8d",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ]
}