CVE-2026-31496

netfilter: nf_conntrack_expect: skip expectations in other netns via proc

State
Published
Severity
Not scored
Published
Apr 22, 2026
Updated
Oct 15, 2026
Reserved
Mar 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_conntrack_expect: skip expectations in other netns via proc

Skip expectations that do not reside in this netns.

Similar to e77e6ff502ea ("netfilter: conntrack: do not dump other netns's conntrack entries via proc").

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 9b03f38d0487f3908696242286d934c9b38f9d2a to before 2028405ea6987b4448784e439413202cfe19f43fAffected
  • 9b03f38d0487f3908696242286d934c9b38f9d2a to before 168145c87444619e3e649322bbe7719ecd00d411Affected
  • 9b03f38d0487f3908696242286d934c9b38f9d2a to before dcfcd95b3ae7683e8ae55c92284b3430ce614bc7Affected
  • 9b03f38d0487f3908696242286d934c9b38f9d2a to before 9ca8c7452493d915f9bbf2f39331e6c583d07a23Affected
  • 9b03f38d0487f3908696242286d934c9b38f9d2a to before 3265ad619987cb551edaf797ed056d80ac450225Affected
  • 9b03f38d0487f3908696242286d934c9b38f9d2a to before 3db5647984de03d9cae0dcddb509b058351f0ee4Affected
LinuxLinux
  • 2.6.28Affected
  • before 2.6.28Not affected
  • 6.1.168 through 6.1.*Not affected
  • 6.6.131 through 6.6.*Not affected
  • 6.12.80 through 6.12.*Not affected
  • 6.18.21 through 6.18.*Not affected
  • 6.19.11 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.