Live › vulnerability › CVE-2026-98873
Go to dashboardThe Linux kernel's netfilter connection tracking code allocated expectation structures without zeroing them, so leftover memory could be reported to userspace through ctnetlink. The fix zeroes the structure at allocation time and sets the missing direction field on re-initialization.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_conntrack_expect: zero at allocation time
There are occasional LLM hints wrt. leaking uninitialized data to userspace via ctnetlink. Just zero at allocation time, expectations are not frequently used these days.
Intentionally keeps _init as-is because we could theoretically support re-init, so add the missing exp->dir there.
This page as .md · .json · in your agent: get_signal("CVE-2026-98873")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.