Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4xqv-x9wj-55p5

Опубликовано: 06 окт. 2026
Источник: github
Github: Не прошло ревью

Описание

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_nat: unregister and release hooks on error

If nf_hook_entries_insert_raw() fails, the NAT hooks get never released, resulting in a memleak.

Postpone setting nat_proto_net->nat_hook_ops when the hooks are registered to simplify the error path to decide whether the nat hooks need unwinding.

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_nat: unregister and release hooks on error

If nf_hook_entries_insert_raw() fails, the NAT hooks get never released, resulting in a memleak.

Postpone setting nat_proto_net->nat_hook_ops when the hooks are registered to simplify the error path to decide whether the nat hooks need unwinding.

EPSS

Процентиль: 7%
0.00173
Низкий

Связанные уязвимости

ubuntu
около 1 месяца назад

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat: unregister and release hooks on error If nf_hook_entries_insert_raw() fails, the NAT hooks get never released, resulting in a memleak. Postpone setting nat_proto_net->nat_hook_ops when the hooks are registered to simplify the error path to decide whether the nat hooks need unwinding.

CVSS3: 5.5
redhat
около 1 месяца назад

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat: unregister and release hooks on error If nf_hook_entries_insert_raw() fails, the NAT hooks get never released, resulting in a memleak. Postpone setting nat_proto_net->nat_hook_ops when the hooks are registered to simplify the error path to decide whether the nat hooks need unwinding.

nvd
около 1 месяца назад

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat: unregister and release hooks on error If nf_hook_entries_insert_raw() fails, the NAT hooks get never released, resulting in a memleak. Postpone setting nat_proto_net->nat_hook_ops when the hooks are registered to simplify the error path to decide whether the nat hooks need unwinding.

CVSS3: 9.8
msrc
около 1 месяца назад

netfilter: nf_nat: unregister and release hooks on error

debian
около 1 месяца назад

In the Linux kernel, the following vulnerability has been resolved: n ...

EPSS

Процентиль: 7%
0.00173
Низкий