Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-43451

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path nfqnl_recv_verdict() calls find_dequeue_entry() to remove the queue entry from the queue data structures, taking ownership of the entry. For PF_BRIDGE packets, it then calls nfqa_parse_bridge() to parse VLAN attributes. If nfqa_parse_bridge() returns an error (e.g. NFQA_VLAN present but NFQA_VLAN_TCI missing), the function returns immediately without free
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:3afc2c202ee026942098ae8ec6fe76d7eac8c85727a81ed1585f3d54836a6744
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["net/netfilter/nfnetlink_queue.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.7"},{"lessThan":"4.7","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.253","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.203","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.167","versionType":"semver"},{…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:b015fae7d891bfa8d9a744f6eedcfd2353120a0610c61ad3c75f7f5dbec60a40 · sha256:618df4bbe17718f4… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/netfilter/nfnetlink_queue.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"a907bea273b60d3e604ec4e8e1f6c49954805794","status":"affected","version":"8d45ff22f1b43249f0cf1baafe0262ca10d1666e","versionType":"git"},{"lessThan":"0b18d1b834ab5a5009be70b530f978d7989e445b","status":"affected","version":"8d45ff22f1b43249f0cf1baafe0262ca10d1666e","versionType":"git"},{"lessThan":"b38d2b4603fd3dda24eb8b3dd81c18a0930be97b","status":"affected","version":"8d45ff22f1b432…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:b015fae7d891bfa8d9a744f6eedcfd2353120a0610c61ad3c75f7f5dbec60a40 · sha256:618df4bbe17718f4… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["net/netfilter/nfnetlink_queue.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.7"},{"lessThan":"4.7","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.253","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.203","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.167","versionType":"semver"},{…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:b015fae7d891bfa8d9a744f6eedcfd2353120a0610c61ad3c75f7f5dbec60a40 · sha256:618df4bbe17718f4… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/netfilter/nfnetlink_queue.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"a907bea273b60d3e604ec4e8e1f6c49954805794","status":"affected","version":"8d45ff22f1b43249f0cf1baafe0262ca10d1666e","versionType":"git"},{"lessThan":"0b18d1b834ab5a5009be70b530f978d7989e445b","status":"affected","version":"8d45ff22f1b43249f0cf1baafe0262ca10d1666e","versionType":"git"},{"lessThan":"b38d2b4603fd3dda24eb8b3dd81c18a0930be97b","status":"affected","version":"8d45ff22f1b432…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:b015fae7d891bfa8d9a744f6eedcfd2353120a0610c61ad3c75f7f5dbec60a40 · sha256:618df4bbe17718f4… · /containers/cna/affected/0

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/0b18d1b834ab5a5009be70b530f978d7989e445b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:b015fae7d891bfa8d9a744f6eedcfd2353120a0610c61ad3c75f7f5dbec60a40 · sha256:618df4bbe17718f4… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/208669df703a25a601f45822b10c413f258bf275"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:b015fae7d891bfa8d9a744f6eedcfd2353120a0610c61ad3c75f7f5dbec60a40 · sha256:618df4bbe17718f4… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/47b1c5d1b0944aa88299f55a846fabaefc756982"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:b015fae7d891bfa8d9a744f6eedcfd2353120a0610c61ad3c75f7f5dbec60a40 · sha256:618df4bbe17718f4… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/9853d94b82d303fc4ac37d592a23a154096ecd41"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:b015fae7d891bfa8d9a744f6eedcfd2353120a0610c61ad3c75f7f5dbec60a40 · sha256:618df4bbe17718f4… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/a907bea273b60d3e604ec4e8e1f6c49954805794"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:b015fae7d891bfa8d9a744f6eedcfd2353120a0610c61ad3c75f7f5dbec60a40 · sha256:618df4bbe17718f4… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/b38d2b4603fd3dda24eb8b3dd81c18a0930be97b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:b015fae7d891bfa8d9a744f6eedcfd2353120a0610c61ad3c75f7f5dbec60a40 · sha256:618df4bbe17718f4… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/cf4a4df38d1747e06fc54f9879bd7a6f4178032f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:b015fae7d891bfa8d9a744f6eedcfd2353120a0610c61ad3c75f7f5dbec60a40 · sha256:618df4bbe17718f4… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/f1ba83755d81c6fc66ac7acd723d238f974091e9"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:b015fae7d891bfa8d9a744f6eedcfd2353120a0610c61ad3c75f7f5dbec60a40 · sha256:618df4bbe17718f4… · /containers/cna/references/7

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer