In the Linux kernel, the following vulnerability has been resolved:
netfilter: ctnetlink: fix refcount leak on table dump
There is a reference count leak in ctnetlinkdumptable(): if (res < 0) { nfconntrackget(&ct->ct_general); // HERE cb->args[1] = (unsigned long)ct; ...
While its very unlikely, its possible that ct == last. If this happens, then the refcount of ct was already incremented. This 2nd increment is never undone.
This prevents the conntrack object from being released, which in turn keeps prevents cnet->count from dropping back to 0.
This will then block the netns dismantle (or conntrack rmmod) as nfconntrackcleanupnetlist() will wait forever.
This can be reproduced by running conntrackresize.sh selftest in a loop. It takes ~20 minutes for me on a preemptible kernel on average before I see a runaway kworker spinning in nfconntrackcleanupnet_list.
One fix would to change this to: if (res < 0) { if (ct != last) nfconntrackget(&ct->ct_general);
But this reference counting isn't needed in the first place. We can just store a cookie value instead.
A followup patch will do the same for ctnetlinkexpdumptable, it looks to me as if this has the same problem and like ctnetlinkdump_table, we only need a 'skip hint', not the actual object so we can apply the same cookie strategy there as well.
[
{
"signature_version": "v1",
"id": "CVE-2025-38721-02b8baea",
"digest": {
"threshold": 0.9,
"line_hashes": [
"12117144969990277691139028436329941203",
"136168674118074730286684446679782936695",
"31914121934950588161338204724916541019",
"222436415056680429461753464855931601048",
"284599639724587752724335802259606874994",
"176344337889416987954261502956182083882",
"165286169245405657421042450956759946174",
"216619643717485860987578191385537398455",
"134739398096232118404027525462711781535",
"50255537200212480351475106329444078728",
"146597792427087455017879259862402013720",
"144866177874922337235711173545640538494",
"126641899827046969125814572656039462475",
"182871431657611321284672951258988409577",
"220880791555050778949676903621173849128",
"87091067249243006685636067900263737583",
"161406576329544971427862084799118730430",
"129100874484879307670082177904275779285",
"248819378742057791984121558504225407672",
"11646622395564050421002347932541308784",
"319887815647788849366702726308743480400",
"47127386794687173263178957245338990148",
"24823183485574957154928858016652685986",
"315931855037224252323106086284946688621",
"155794710476223516961002139181713954104",
"305613347581832728727860061401178691373",
"221645064878311349883599908064791834531",
"130480721536642741971495885861089871001",
"233637268151165807669103330628339569665",
"229697929901605693449833507251935684057",
"240507352205670122877669819319968474912",
"106635180570934755839402729517733184994",
"36639157481132317987620200572963524502",
"168860318155245730157786569215257646919",
"235325908817162241913159443939291473796",
"154632685291746371768827946354344297723"
]
},
"deprecated": false,
"target": {
"file": "net/netfilter/nf_conntrack_netlink.c"
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e14f72aa66c029db106921d621edcedef68e065b"
},
{
"signature_version": "v1",
"id": "CVE-2025-38721-0566862e",
"digest": {
"function_hash": "213946892712875840557564737354246523303",
"length": 1868.0
},
"deprecated": false,
"target": {
"file": "net/netfilter/nf_conntrack_netlink.c",
"function": "ctnetlink_dump_table"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@30cf811058552b8cd0e98dff677ef3f89d6d34ce"
},
{
"signature_version": "v1",
"id": "CVE-2025-38721-0710a290",
"digest": {
"threshold": 0.9,
"line_hashes": [
"12117144969990277691139028436329941203",
"136168674118074730286684446679782936695",
"31914121934950588161338204724916541019",
"222436415056680429461753464855931601048",
"284599639724587752724335802259606874994",
"176344337889416987954261502956182083882",
"165286169245405657421042450956759946174",
"216619643717485860987578191385537398455",
"134739398096232118404027525462711781535",
"50255537200212480351475106329444078728",
"146597792427087455017879259862402013720",
"144866177874922337235711173545640538494",
"126641899827046969125814572656039462475",
"182871431657611321284672951258988409577",
"220880791555050778949676903621173849128",
"87091067249243006685636067900263737583",
"161406576329544971427862084799118730430",
"129100874484879307670082177904275779285",
"248819378742057791984121558504225407672",
"11646622395564050421002347932541308784",
"319887815647788849366702726308743480400",
"47127386794687173263178957245338990148",
"24823183485574957154928858016652685986",
"315931855037224252323106086284946688621",
"155794710476223516961002139181713954104",
"305613347581832728727860061401178691373",
"221645064878311349883599908064791834531",
"130480721536642741971495885861089871001",
"233637268151165807669103330628339569665",
"229697929901605693449833507251935684057",
"240507352205670122877669819319968474912",
"106635180570934755839402729517733184994",
"36639157481132317987620200572963524502",
"168860318155245730157786569215257646919",
"235325908817162241913159443939291473796",
"154632685291746371768827946354344297723"
]
},
"deprecated": false,
"target": {
"file": "net/netfilter/nf_conntrack_netlink.c"
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a2cb4df7872de069f809de2f076ec8e54d649fe3"
},
{
"signature_version": "v1",
"id": "CVE-2025-38721-0a50d98f",
"digest": {
"threshold": 0.9,
"line_hashes": [
"12117144969990277691139028436329941203",
"136168674118074730286684446679782936695",
"31914121934950588161338204724916541019",
"222436415056680429461753464855931601048",
"284599639724587752724335802259606874994",
"176344337889416987954261502956182083882",
"165286169245405657421042450956759946174",
"216619643717485860987578191385537398455",
"134739398096232118404027525462711781535",
"50255537200212480351475106329444078728",
"146597792427087455017879259862402013720",
"144866177874922337235711173545640538494",
"126641899827046969125814572656039462475",
"182871431657611321284672951258988409577",
"220880791555050778949676903621173849128",
"87091067249243006685636067900263737583",
"161406576329544971427862084799118730430",
"129100874484879307670082177904275779285",
"248819378742057791984121558504225407672",
"11646622395564050421002347932541308784",
"119283200724323503663266631138907708851",
"47127386794687173263178957245338990148",
"24823183485574957154928858016652685986",
"315931855037224252323106086284946688621",
"155794710476223516961002139181713954104",
"305613347581832728727860061401178691373",
"221645064878311349883599908064791834531",
"130480721536642741971495885861089871001",
"233637268151165807669103330628339569665",
"229697929901605693449833507251935684057",
"240507352205670122877669819319968474912",
"106635180570934755839402729517733184994",
"36639157481132317987620200572963524502",
"168860318155245730157786569215257646919",
"235325908817162241913159443939291473796",
"154632685291746371768827946354344297723"
]
},
"deprecated": false,
"target": {
"file": "net/netfilter/nf_conntrack_netlink.c"
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@962518c6ca9f9a13df099cafa429f72f68ad61f0"
},
{
"signature_version": "v1",
"id": "CVE-2025-38721-0f5b4d2e",
"digest": {
"threshold": 0.9,
"line_hashes": [
"12117144969990277691139028436329941203",
"136168674118074730286684446679782936695",
"31914121934950588161338204724916541019",
"222436415056680429461753464855931601048",
"284599639724587752724335802259606874994",
"176344337889416987954261502956182083882",
"165286169245405657421042450956759946174",
"216619643717485860987578191385537398455",
"134739398096232118404027525462711781535",
"50255537200212480351475106329444078728",
"146597792427087455017879259862402013720",
"144866177874922337235711173545640538494",
"126641899827046969125814572656039462475",
"182871431657611321284672951258988409577",
"220880791555050778949676903621173849128",
"87091067249243006685636067900263737583",
"161406576329544971427862084799118730430",
"129100874484879307670082177904275779285",
"248819378742057791984121558504225407672",
"11646622395564050421002347932541308784",
"119283200724323503663266631138907708851",
"47127386794687173263178957245338990148",
"24823183485574957154928858016652685986",
"315931855037224252323106086284946688621",
"155794710476223516961002139181713954104",
"305613347581832728727860061401178691373",
"221645064878311349883599908064791834531",
"130480721536642741971495885861089871001",
"233637268151165807669103330628339569665",
"229697929901605693449833507251935684057",
"240507352205670122877669819319968474912",
"106635180570934755839402729517733184994",
"36639157481132317987620200572963524502",
"168860318155245730157786569215257646919",
"235325908817162241913159443939291473796",
"154632685291746371768827946354344297723"
]
},
"deprecated": false,
"target": {
"file": "net/netfilter/nf_conntrack_netlink.c"
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@19b909a4b1452fb97e477d2f08b97f8d04095619"
},
{
"signature_version": "v1",
"id": "CVE-2025-38721-14424007",
"digest": {
"function_hash": "78302334101618141068532452003029782698",
"length": 157.0
},
"deprecated": false,
"target": {
"file": "net/netfilter/nf_conntrack_netlink.c",
"function": "ctnetlink_done"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@41462f4cfc583513833f87f9ee55d12da651a7e3"
},
{
"signature_version": "v1",
"id": "CVE-2025-38721-31b5db14",
"digest": {
"threshold": 0.9,
"line_hashes": [
"12117144969990277691139028436329941203",
"136168674118074730286684446679782936695",
"31914121934950588161338204724916541019",
"222436415056680429461753464855931601048",
"284599639724587752724335802259606874994",
"176344337889416987954261502956182083882",
"165286169245405657421042450956759946174",
"216619643717485860987578191385537398455",
"134739398096232118404027525462711781535",
"50255537200212480351475106329444078728",
"146597792427087455017879259862402013720",
"144866177874922337235711173545640538494",
"126641899827046969125814572656039462475",
"182871431657611321284672951258988409577",
"220880791555050778949676903621173849128",
"87091067249243006685636067900263737583",
"161406576329544971427862084799118730430",
"129100874484879307670082177904275779285",
"248819378742057791984121558504225407672",
"11646622395564050421002347932541308784",
"319887815647788849366702726308743480400",
"47127386794687173263178957245338990148",
"24823183485574957154928858016652685986",
"315931855037224252323106086284946688621",
"155794710476223516961002139181713954104",
"305613347581832728727860061401178691373",
"221645064878311349883599908064791834531",
"130480721536642741971495885861089871001",
"233637268151165807669103330628339569665",
"229697929901605693449833507251935684057",
"240507352205670122877669819319968474912",
"106635180570934755839402729517733184994",
"36639157481132317987620200572963524502",
"168860318155245730157786569215257646919",
"235325908817162241913159443939291473796",
"154632685291746371768827946354344297723"
]
},
"deprecated": false,
"target": {
"file": "net/netfilter/nf_conntrack_netlink.c"
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@30cf811058552b8cd0e98dff677ef3f89d6d34ce"
},
{
"signature_version": "v1",
"id": "CVE-2025-38721-33a68c85",
"digest": {
"threshold": 0.9,
"line_hashes": [
"12117144969990277691139028436329941203",
"136168674118074730286684446679782936695",
"31914121934950588161338204724916541019",
"222436415056680429461753464855931601048",
"284599639724587752724335802259606874994",
"176344337889416987954261502956182083882",
"165286169245405657421042450956759946174",
"216619643717485860987578191385537398455",
"134739398096232118404027525462711781535",
"50255537200212480351475106329444078728",
"146597792427087455017879259862402013720",
"144866177874922337235711173545640538494",
"126641899827046969125814572656039462475",
"182871431657611321284672951258988409577",
"220880791555050778949676903621173849128",
"87091067249243006685636067900263737583",
"161406576329544971427862084799118730430",
"129100874484879307670082177904275779285",
"248819378742057791984121558504225407672",
"11646622395564050421002347932541308784",
"319887815647788849366702726308743480400",
"47127386794687173263178957245338990148",
"24823183485574957154928858016652685986",
"315931855037224252323106086284946688621",
"155794710476223516961002139181713954104",
"305613347581832728727860061401178691373",
"221645064878311349883599908064791834531",
"130480721536642741971495885861089871001",
"233637268151165807669103330628339569665",
"229697929901605693449833507251935684057",
"240507352205670122877669819319968474912",
"106635180570934755839402729517733184994",
"36639157481132317987620200572963524502",
"168860318155245730157786569215257646919",
"235325908817162241913159443939291473796",
"154632685291746371768827946354344297723"
]
},
"deprecated": false,
"target": {
"file": "net/netfilter/nf_conntrack_netlink.c"
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a62d6aa3f31f216b637a4c71b7a8bfc7c57f049b"
},
{
"signature_version": "v1",
"id": "CVE-2025-38721-37d28a38",
"digest": {
"function_hash": "78302334101618141068532452003029782698",
"length": 157.0
},
"deprecated": false,
"target": {
"file": "net/netfilter/nf_conntrack_netlink.c",
"function": "ctnetlink_done"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a2cb4df7872de069f809de2f076ec8e54d649fe3"
},
{
"signature_version": "v1",
"id": "CVE-2025-38721-3c182141",
"digest": {
"threshold": 0.9,
"line_hashes": [
"12117144969990277691139028436329941203",
"136168674118074730286684446679782936695",
"31914121934950588161338204724916541019",
"222436415056680429461753464855931601048",
"284599639724587752724335802259606874994",
"176344337889416987954261502956182083882",
"165286169245405657421042450956759946174",
"216619643717485860987578191385537398455",
"72280306716305534154631798592353111208",
"10299439553658893753837767112162995586",
"89985213855572886502075670556500971245",
"126641899827046969125814572656039462475",
"182871431657611321284672951258988409577",
"220880791555050778949676903621173849128",
"87091067249243006685636067900263737583",
"161406576329544971427862084799118730430",
"129100874484879307670082177904275779285",
"248819378742057791984121558504225407672",
"11646622395564050421002347932541308784",
"119283200724323503663266631138907708851",
"47127386794687173263178957245338990148",
"24823183485574957154928858016652685986",
"315931855037224252323106086284946688621",
"294141719752860256177460721893811193886",
"71636390229217106074489788715373788045",
"221645064878311349883599908064791834531",
"130480721536642741971495885861089871001",
"233637268151165807669103330628339569665",
"229697929901605693449833507251935684057",
"240507352205670122877669819319968474912",
"106635180570934755839402729517733184994",
"36639157481132317987620200572963524502",
"168860318155245730157786569215257646919",
"235325908817162241913159443939291473796",
"154632685291746371768827946354344297723"
]
},
"deprecated": false,
"target": {
"file": "net/netfilter/nf_conntrack_netlink.c"
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@586892e341fbf698e7cbaca293e1353957db725a"
},
{
"signature_version": "v1",
"id": "CVE-2025-38721-3da64864",
"digest": {
"function_hash": "96371793222964625437527039723633641601",
"length": 1868.0
},
"deprecated": false,
"target": {
"file": "net/netfilter/nf_conntrack_netlink.c",
"function": "ctnetlink_dump_table"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@19b909a4b1452fb97e477d2f08b97f8d04095619"
},
{
"signature_version": "v1",
"id": "CVE-2025-38721-4eac6d3d",
"digest": {
"function_hash": "213946892712875840557564737354246523303",
"length": 1868.0
},
"deprecated": false,
"target": {
"file": "net/netfilter/nf_conntrack_netlink.c",
"function": "ctnetlink_dump_table"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a2cb4df7872de069f809de2f076ec8e54d649fe3"
},
{
"signature_version": "v1",
"id": "CVE-2025-38721-53781630",
"digest": {
"function_hash": "213946892712875840557564737354246523303",
"length": 1868.0
},
"deprecated": false,
"target": {
"file": "net/netfilter/nf_conntrack_netlink.c",
"function": "ctnetlink_dump_table"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a62d6aa3f31f216b637a4c71b7a8bfc7c57f049b"
},
{
"signature_version": "v1",
"id": "CVE-2025-38721-5c986701",
"digest": {
"function_hash": "78302334101618141068532452003029782698",
"length": 157.0
},
"deprecated": false,
"target": {
"file": "net/netfilter/nf_conntrack_netlink.c",
"function": "ctnetlink_done"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@586892e341fbf698e7cbaca293e1353957db725a"
},
{
"signature_version": "v1",
"id": "CVE-2025-38721-5f28bb85",
"digest": {
"threshold": 0.9,
"line_hashes": [
"12117144969990277691139028436329941203",
"136168674118074730286684446679782936695",
"31914121934950588161338204724916541019",
"222436415056680429461753464855931601048",
"284599639724587752724335802259606874994",
"176344337889416987954261502956182083882",
"165286169245405657421042450956759946174",
"216619643717485860987578191385537398455",
"134739398096232118404027525462711781535",
"50255537200212480351475106329444078728",
"146597792427087455017879259862402013720",
"144866177874922337235711173545640538494",
"126641899827046969125814572656039462475",
"182871431657611321284672951258988409577",
"220880791555050778949676903621173849128",
"87091067249243006685636067900263737583",
"161406576329544971427862084799118730430",
"129100874484879307670082177904275779285",
"248819378742057791984121558504225407672",
"11646622395564050421002347932541308784",
"319887815647788849366702726308743480400",
"47127386794687173263178957245338990148",
"24823183485574957154928858016652685986",
"315931855037224252323106086284946688621",
"155794710476223516961002139181713954104",
"305613347581832728727860061401178691373",
"221645064878311349883599908064791834531",
"130480721536642741971495885861089871001",
"233637268151165807669103330628339569665",
"229697929901605693449833507251935684057",
"240507352205670122877669819319968474912",
"106635180570934755839402729517733184994",
"36639157481132317987620200572963524502",
"168860318155245730157786569215257646919",
"235325908817162241913159443939291473796",
"154632685291746371768827946354344297723"
]
},
"deprecated": false,
"target": {
"file": "net/netfilter/nf_conntrack_netlink.c"
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@41462f4cfc583513833f87f9ee55d12da651a7e3"
},
{
"signature_version": "v1",
"id": "CVE-2025-38721-62532f9b",
"digest": {
"threshold": 0.9,
"line_hashes": [
"12117144969990277691139028436329941203",
"136168674118074730286684446679782936695",
"31914121934950588161338204724916541019",
"222436415056680429461753464855931601048",
"284599639724587752724335802259606874994",
"176344337889416987954261502956182083882",
"165286169245405657421042450956759946174",
"216619643717485860987578191385537398455",
"134739398096232118404027525462711781535",
"50255537200212480351475106329444078728",
"146597792427087455017879259862402013720",
"144866177874922337235711173545640538494",
"126641899827046969125814572656039462475",
"182871431657611321284672951258988409577",
"220880791555050778949676903621173849128",
"87091067249243006685636067900263737583",
"161406576329544971427862084799118730430",
"129100874484879307670082177904275779285",
"248819378742057791984121558504225407672",
"11646622395564050421002347932541308784",
"319887815647788849366702726308743480400",
"47127386794687173263178957245338990148",
"24823183485574957154928858016652685986",
"315931855037224252323106086284946688621",
"155794710476223516961002139181713954104",
"305613347581832728727860061401178691373",
"221645064878311349883599908064791834531",
"130480721536642741971495885861089871001",
"233637268151165807669103330628339569665",
"229697929901605693449833507251935684057",
"240507352205670122877669819319968474912",
"106635180570934755839402729517733184994",
"36639157481132317987620200572963524502",
"168860318155245730157786569215257646919",
"235325908817162241913159443939291473796",
"154632685291746371768827946354344297723"
]
},
"deprecated": false,
"target": {
"file": "net/netfilter/nf_conntrack_netlink.c"
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@de788b2e6227462b6dcd0e07474e72c089008f74"
},
{
"signature_version": "v1",
"id": "CVE-2025-38721-777a5300",
"digest": {
"function_hash": "129729876922824155417284599757254380714",
"length": 1822.0
},
"deprecated": false,
"target": {
"file": "net/netfilter/nf_conntrack_netlink.c",
"function": "ctnetlink_dump_table"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@586892e341fbf698e7cbaca293e1353957db725a"
},
{
"signature_version": "v1",
"id": "CVE-2025-38721-7813a79a",
"digest": {
"function_hash": "78302334101618141068532452003029782698",
"length": 157.0
},
"deprecated": false,
"target": {
"file": "net/netfilter/nf_conntrack_netlink.c",
"function": "ctnetlink_done"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@de788b2e6227462b6dcd0e07474e72c089008f74"
},
{
"signature_version": "v1",
"id": "CVE-2025-38721-8974e45c",
"digest": {
"function_hash": "96371793222964625437527039723633641601",
"length": 1868.0
},
"deprecated": false,
"target": {
"file": "net/netfilter/nf_conntrack_netlink.c",
"function": "ctnetlink_dump_table"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@962518c6ca9f9a13df099cafa429f72f68ad61f0"
},
{
"signature_version": "v1",
"id": "CVE-2025-38721-8ac29476",
"digest": {
"function_hash": "78302334101618141068532452003029782698",
"length": 157.0
},
"deprecated": false,
"target": {
"file": "net/netfilter/nf_conntrack_netlink.c",
"function": "ctnetlink_done"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a62d6aa3f31f216b637a4c71b7a8bfc7c57f049b"
},
{
"signature_version": "v1",
"id": "CVE-2025-38721-8e7cf5af",
"digest": {
"function_hash": "78302334101618141068532452003029782698",
"length": 157.0
},
"deprecated": false,
"target": {
"file": "net/netfilter/nf_conntrack_netlink.c",
"function": "ctnetlink_done"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e14f72aa66c029db106921d621edcedef68e065b"
},
{
"signature_version": "v1",
"id": "CVE-2025-38721-a45d18b1",
"digest": {
"function_hash": "213946892712875840557564737354246523303",
"length": 1868.0
},
"deprecated": false,
"target": {
"file": "net/netfilter/nf_conntrack_netlink.c",
"function": "ctnetlink_dump_table"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@41462f4cfc583513833f87f9ee55d12da651a7e3"
},
{
"signature_version": "v1",
"id": "CVE-2025-38721-bd962b8f",
"digest": {
"function_hash": "213946892712875840557564737354246523303",
"length": 1868.0
},
"deprecated": false,
"target": {
"file": "net/netfilter/nf_conntrack_netlink.c",
"function": "ctnetlink_dump_table"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@de788b2e6227462b6dcd0e07474e72c089008f74"
},
{
"signature_version": "v1",
"id": "CVE-2025-38721-ca66630f",
"digest": {
"function_hash": "213946892712875840557564737354246523303",
"length": 1868.0
},
"deprecated": false,
"target": {
"file": "net/netfilter/nf_conntrack_netlink.c",
"function": "ctnetlink_dump_table"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e14f72aa66c029db106921d621edcedef68e065b"
},
{
"signature_version": "v1",
"id": "CVE-2025-38721-d8e959bc",
"digest": {
"function_hash": "78302334101618141068532452003029782698",
"length": 157.0
},
"deprecated": false,
"target": {
"file": "net/netfilter/nf_conntrack_netlink.c",
"function": "ctnetlink_done"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@962518c6ca9f9a13df099cafa429f72f68ad61f0"
},
{
"signature_version": "v1",
"id": "CVE-2025-38721-dbe184be",
"digest": {
"function_hash": "78302334101618141068532452003029782698",
"length": 157.0
},
"deprecated": false,
"target": {
"file": "net/netfilter/nf_conntrack_netlink.c",
"function": "ctnetlink_done"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@30cf811058552b8cd0e98dff677ef3f89d6d34ce"
},
{
"signature_version": "v1",
"id": "CVE-2025-38721-fc8608c2",
"digest": {
"function_hash": "78302334101618141068532452003029782698",
"length": 157.0
},
"deprecated": false,
"target": {
"file": "net/netfilter/nf_conntrack_netlink.c",
"function": "ctnetlink_done"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@19b909a4b1452fb97e477d2f08b97f8d04095619"
}
]