Riskcovery

CVE-2026-80636

netfilter: conntrack: revert ct extension genid infrastructure

State
Published
Severity
Not scored
Published
Aug 28, 2026
Updated
Aug 28, 2026
Reserved
Aug 26, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: conntrack: revert ct extension genid infrastructure

This infrastructure is not used anymore after moving ct timeout and helper to use datapath refcount to track object use.

Revert commit c56716c69ce1 ("netfilter: extensions: introduce extension genid count") this patch disables all ct extensions (leading to NULL) for unconfirmed conntracks, when this is only targeted at ct helper and ct timeout. There is also codebase that dereferences the ct extension without checking for NULL which could lead to crash.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • c56716c69ce1ac320432fb1ea5654196ba24d2f8 to before 6bba4846f196d081bf553391d12b5a73dcc48685Affected
  • c56716c69ce1ac320432fb1ea5654196ba24d2f8 to before 61eab1d0237eb513fe73e391a5926ee70092c325Affected
  • c56716c69ce1ac320432fb1ea5654196ba24d2f8 to before d53eecbca16f056abba274075cb15120ab062518Affected
  • c56716c69ce1ac320432fb1ea5654196ba24d2f8 to before a052a94bcc629acaecc2ce42a4af77f8fa399757Affected
  • c56716c69ce1ac320432fb1ea5654196ba24d2f8 to before 35e21a4dccc5c255ba59ccfbfeb4629ed21da972Affected
LinuxLinux
  • 5.19Affected
  • before 5.19Not affected
  • 6.6.145 through 6.6.*Not affected
  • 6.12.97 through 6.12.*Not affected
  • 6.18.40 through 6.18.*Not affected
  • 7.1.5 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.