CVE-2026-52970

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-52970

Import Source

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-52970

Downstream

Published

2026-06-24T16:28:48.882Z

Modified

2026-07-12T03:54:57.783565634Z

Summary

netfilter: nft_ct: fix missing expect put in obj eval

Details

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft_ct: fix missing expect put in obj eval

nftctexpectobjeval() allocates an expectation and may call nfctexpect_related(), but never drops its local reference.

Add nfctexpect_put(exp) before return to balance allocation.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/52xxx/CVE-2026-52970.json",
    "cna_assigner": "Linux"
}

References

Affected packages

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

857b46027d6f91150797295752581b7155b9d0e1

Fixed

cdb9a25dd3416d427e8b2753210f8baf44207577

Fixed

26ab32ec73941871c97562ee1f39587950dc3b68

Fixed

7b96242ceedfe249f158419f3254bcee04173ffe

Fixed

ecca618e1e339494911090474ed87742c0f73976

Fixed

2aef1b13d5c0285f340512c6c07eb858fd018fd8

Fixed

1dced0725e2fae3ac3416274db20a7ff5a46931d

Fixed

84c422cea5a45fe56be839f25880f21fd33940cd

Fixed

19f94b6fee75b3ef7fbc06f3745b9a771a8a19a4

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-52970.json"

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-52970.json"