CVE-2026-98873

Full vulnerability record from the local CVENow database.

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_expect: zero at allocation time There are occasional LLM hints wrt. leaking uninitialized data to userspace via ctnetlink. Just zero at allocation time, expectations are not frequently used these days. Intentionally keeps _init as-is because we could theoretically support re-init, so add the missing exp->dir there.

Severity

Not scored

CVSS score

Not available

Vulnerability status

Received

Source identifier

416baaa9-dc9f-4396-8d5f-8c081fb06d67

Published

2026-10-23 12:18:20.753000

Last modified

2026-10-26 07:17:11.740000

View original CVE JSON

{
  "id": "CVE-2026-98873",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "published": "2026-10-23T12:18:20.753",
  "lastModified": "2026-10-26T07:17:11.740",
  "vulnStatus": "Received",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_conntrack_expect: zero at allocation time\n\nThere are occasional LLM hints wrt. leaking uninitialized data to\nuserspace via ctnetlink.  Just zero at allocation time,\nexpectations are not frequently used these days.\n\nIntentionally keeps _init as-is because we could theoretically\nsupport re-init, so add the missing exp->dir there."
    }
  ],
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "programFiles": [
            "net/netfilter/nf_conntrack_expect.c",
            "net/netfilter/nf_conntrack_netlink.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "versions": [
            {
              "version": "076a0ca02644657b13e4af363f487ced2942e9cb",
              "lessThan": "39cb6ff947c16a576ea68c5f272e634acdcb0085",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "076a0ca02644657b13e4af363f487ced2942e9cb",
              "lessThan": "90545aa07a183887e9d72ce573c18e08f62e2c91",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "076a0ca02644657b13e4af363f487ced2942e9cb",
              "lessThan": "9c11d7ea5ff4dbe162e79f00188814ef5483c295",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "076a0ca02644657b13e4af363f487ced2942e9cb",
              "lessThan": "b7f3ee925aee9f1f547d539bc03c35433c238958",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "076a0ca02644657b13e4af363f487ced2942e9cb",
              "lessThan": "824397af7bfe14edad374c64253dae0187ca623d",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "076a0ca02644657b13e4af363f487ced2942e9cb",
              "lessThan": "a39ecb856514274c80d0fac4d128dba6b266a8ed",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "076a0ca02644657b13e4af363f487ced2942e9cb",
              "lessThan": "241ccd2fed9051db443aadce248fc0ab30f55e97",
              "versionType": "git",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "programFiles": [
            "net/netfilter/nf_conntrack_expect.c",
            "net/netfilter/nf_conntrack_netlink.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "versions": [
            {
              "version": "3.4",
              "status": "affected"
            },
            {
              "version": "0",
              "lessThan": "3.4",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "5.10.271",
              "lessThanOrEqual": "5.10.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "5.15.222",
              "lessThanOrEqual": "5.15.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.1.189",
              "lessThanOrEqual": "6.1.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.6.158",
              "lessThanOrEqual": "6.6.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.12.111",
              "lessThanOrEqual": "6.12.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.18.53",
              "lessThanOrEqual": "6.18.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "7.2",
              "lessThanOrEqual": "*",
              "versionType": "original_commit_for_fix",
              "status": "unaffected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/241ccd2fed9051db443aadce248fc0ab30f55e97",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/39cb6ff947c16a576ea68c5f272e634acdcb0085",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/824397af7bfe14edad374c64253dae0187ca623d",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/90545aa07a183887e9d72ce573c18e08f62e2c91",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/9c11d7ea5ff4dbe162e79f00188814ef5483c295",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/a39ecb856514274c80d0fac4d128dba6b266a8ed",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/b7f3ee925aee9f1f547d539bc03c35433c238958",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ]
}