← All advisories

Medium severity5.5NVD Advisory· Published Jun 24, 2026· Updated Jul 14, 2026

CVE-2026-52970

CVE-2026-52970

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft_ct: fix missing expect put in obj eval

nft_ct_expect_obj_eval() allocates an expectation and may call nf_ct_expect_related(), but never drops its local reference.

Add nf_ct_expect_put(exp) before return to balance allocation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6

Linux/Kernel4 versions
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=5.3,<5.10.258
- cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:*
Linux/netfilter:nft_ctllm-create
osv-coords
pkg:linux/kernel
Range: >= 5.3.0, < 5.10.258

Patches

Vulnerability mechanics

References

8

News mentions

0

No linked articles in our index yet.