CVE-2026-98873
- Source
- https://cve.org/CVERecord?id=CVE-2026-98873
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-98873.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2026-98873
- Downstream
- Published
- 2026-10-23T11:37:14Z
- Modified
- 2026-10-28T02:32:36Z
- Summary
- netfilter: nf_conntrack_expect: zero at allocation time
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_conntrack_expect: zero at allocation time
There are occasional LLM hints wrt. leaking uninitialized data to userspace via ctnetlink. Just zero at allocation time, expectations are not frequently used these days.
Intentionally keeps _init as-is because we could theoretically support re-init, so add the missing exp->dir there.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98873.json" }- References
-
- https://git.kernel.org/stable/c/241ccd2fed9051db443aadce248fc0ab30f55e97
- https://git.kernel.org/stable/c/39cb6ff947c16a576ea68c5f272e634acdcb0085
- https://git.kernel.org/stable/c/824397af7bfe14edad374c64253dae0187ca623d
- https://git.kernel.org/stable/c/90545aa07a183887e9d72ce573c18e08f62e2c91
- https://git.kernel.org/stable/c/9c11d7ea5ff4dbe162e79f00188814ef5483c295
- https://git.kernel.org/stable/c/a39ecb856514274c80d0fac4d128dba6b266a8ed
- https://git.kernel.org/stable/c/b7f3ee925aee9f1f547d539bc03c35433c238958
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98873.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-98873
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced076a0ca02644657b13e4af363f487ced2942e9cbFixed39cb6ff947c16a576ea68c5f272e634acdcb0085Fixed90545aa07a183887e9d72ce573c18e08f62e2c91Fixed9c11d7ea5ff4dbe162e79f00188814ef5483c295Fixedb7f3ee925aee9f1f547d539bc03c35433c238958Fixed824397af7bfe14edad374c64253dae0187ca623dFixeda39ecb856514274c80d0fac4d128dba6b266a8edFixed241ccd2fed9051db443aadce248fc0ab30f55e97
Linux / Kernel
Package
- Name
- Kernel
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced3.4.0Fixed5.10.271
- Type
- ECOSYSTEM
- Events
-
Introduced5.11.0Fixed5.15.222
- Type
- ECOSYSTEM
- Events
-
Introduced5.16.0Fixed6.1.189
- Type
- ECOSYSTEM
- Events
-
Introduced6.2.0Fixed6.6.158
- Type
- ECOSYSTEM
- Events
-
Introduced6.7.0Fixed6.12.111
- Type
- ECOSYSTEM
- Events
-
Introduced6.13.0Fixed6.18.53