CVE-2026-52970

Published: Jun 24, 2026Modified: Jul 14, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_ct: fix missing expect put in obj eval nft_ct_expect_obj_eval() allocates an expectation and may call nf_ct_expect_related(), but never drops its local reference. Add nf_ct_expect_put(exp) before return to balance allocation.

Affected (10)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 5.11 to 5.15.209
Linux Linux Kernel	From 5.16 to 6.1.175
Linux Linux Kernel	From 5.3 to 5.10.258
Linux Linux Kernel	From 6.13 to 6.18.33
Linux Linux Kernel	From 6.19 to 7.0.10
Linux Linux Kernel	From 6.2 to 6.6.141
Linux Linux Kernel	From 6.7 to 6.12.91
Linux Linux Kernel	Version 7.1 rc1
Linux Linux Kernel	Version 7.1 rc2
Linux Linux Kernel	Version 7.1 rc3