In the Linux kernel, the following vulnerability has been resolved:
netfilter: ctnetlink: ignore explicit helper on new expectations
Use the existing master conntrack helper, anything else is not really supported and it just makes validation more complicated, so just ignore what helper userspace suggests for this expectation.
This was uncovered when validating CTA_EXPECT_CLASS via different helper provided by userspace than the existing master conntrack helper:
BUG: KASAN: slab-out-of-bounds in nf_ct_expect_related_report+0x2479/0x27c0 Read of size 4 at addr ffff8880043fe408 by task poc/102 Call Trace: nf_ct_expect_related_report+0x2479/0x27c0 ctnetlink_create_expect+0x22b/0x3b0 ctnetlink_new_expect+0x4bd/0x5c0 nfnetlink_rcv_msg+0x67a/0x950 netlink_rcv_skb+0x120/0x350
Allowing to read kernel memory bytes off the expectation boundary.
CTA_EXPECT_HELP_NAME is still used to offer the helper name to userspace via netlink dump.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | May 3, 2026 | May 3, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | May 1, 2026 |
| Ubuntu | — | Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-oracleUpgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-aws-fipsUpgrade linux-image-gcp-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-fde-6.8Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-generic-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-fips-6.8Upgrade linux-image-gkeUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-6.8.0-1061-awsUpgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-realtimeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-aws-fips-6.8Upgrade linux-image-laptop-23.10Upgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-kvmUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-aws-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-intel-iotgUpgrade linux-image-gke-64k-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-gkeop-6.8Upgrade linux-image-gke-64kUpgrade linux-image-generic-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-ibm-6.8Upgrade linux-image-gkeopUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-ibm-classicUpgrade linux-image-gcpUpgrade linux-image-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-realtime-6.8.1Upgrade linux-image-genericUpgrade linux-image-oracle-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gcp-fipsUpgrade linux-image-gke-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1063-azureUpgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-xilinxUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-fipsUpgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-136-fipsUpgrade linux-image-xilinx-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-64kUpgrade linux-image-ibmUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-136-generic | May 25, 2026 | May 1, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | May 1, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub