Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-52970

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_ct: fix missing expect put in obj eval nft_ct_expect_obj_eval() allocates an expectation and may call nf_ct_expect_related(), but never drops its local reference. Add nf_ct_expect_put(exp) before return to balance allocation.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:b6fa3c31d39e1f65355cf9792b5f82a60414e5d747db6d435bc733f2cd119cfa
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/netfilter/nft_ct.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"cdb9a25dd3416d427e8b2753210f8baf44207577","status":"affected","version":"857b46027d6f91150797295752581b7155b9d0e1","versionType":"git"},{"lessThan":"26ab32ec73941871c97562ee1f39587950dc3b68","status":"affected","version":"857b46027d6f91150797295752581b7155b9d0e1","versionType":"git"},{"lessThan":"7b96242ceedfe249f158419f3254bcee04173ffe","status":"affected","version":"857b46027d6f91150797295…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:3575226d6bf9b70b0afff5b276464971fe3fd17697614ad7bcce3a63a4b78860 · sha256:74fc6a6f35ea2020… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["net/netfilter/nft_ct.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.3"},{"lessThan":"5.3","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessThan…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:3575226d6bf9b70b0afff5b276464971fe3fd17697614ad7bcce3a63a4b78860 · sha256:74fc6a6f35ea2020… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/netfilter/nft_ct.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"cdb9a25dd3416d427e8b2753210f8baf44207577","status":"affected","version":"857b46027d6f91150797295752581b7155b9d0e1","versionType":"git"},{"lessThan":"26ab32ec73941871c97562ee1f39587950dc3b68","status":"affected","version":"857b46027d6f91150797295752581b7155b9d0e1","versionType":"git"},{"lessThan":"7b96242ceedfe249f158419f3254bcee04173ffe","status":"affected","version":"857b46027d6f91150797295…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:3575226d6bf9b70b0afff5b276464971fe3fd17697614ad7bcce3a63a4b78860 · sha256:74fc6a6f35ea2020… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["net/netfilter/nft_ct.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.3"},{"lessThan":"5.3","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessThan…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:3575226d6bf9b70b0afff5b276464971fe3fd17697614ad7bcce3a63a4b78860 · sha256:74fc6a6f35ea2020… · /containers/cna/affected/1

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/19f94b6fee75b3ef7fbc06f3745b9a771a8a19a4"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:3575226d6bf9b70b0afff5b276464971fe3fd17697614ad7bcce3a63a4b78860 · sha256:74fc6a6f35ea2020… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/1dced0725e2fae3ac3416274db20a7ff5a46931d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:3575226d6bf9b70b0afff5b276464971fe3fd17697614ad7bcce3a63a4b78860 · sha256:74fc6a6f35ea2020… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/26ab32ec73941871c97562ee1f39587950dc3b68"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:3575226d6bf9b70b0afff5b276464971fe3fd17697614ad7bcce3a63a4b78860 · sha256:74fc6a6f35ea2020… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/2aef1b13d5c0285f340512c6c07eb858fd018fd8"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:3575226d6bf9b70b0afff5b276464971fe3fd17697614ad7bcce3a63a4b78860 · sha256:74fc6a6f35ea2020… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/7b96242ceedfe249f158419f3254bcee04173ffe"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:3575226d6bf9b70b0afff5b276464971fe3fd17697614ad7bcce3a63a4b78860 · sha256:74fc6a6f35ea2020… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/84c422cea5a45fe56be839f25880f21fd33940cd"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:3575226d6bf9b70b0afff5b276464971fe3fd17697614ad7bcce3a63a4b78860 · sha256:74fc6a6f35ea2020… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/cdb9a25dd3416d427e8b2753210f8baf44207577"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:3575226d6bf9b70b0afff5b276464971fe3fd17697614ad7bcce3a63a4b78860 · sha256:74fc6a6f35ea2020… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/ecca618e1e339494911090474ed87742c0f73976"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:3575226d6bf9b70b0afff5b276464971fe3fd17697614ad7bcce3a63a4b78860 · sha256:74fc6a6f35ea2020… · /containers/cna/references/3

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer