netfilter: nf_conntrack_expect: skip expectations in other netns via proc
Summary
| CVE | CVE-2026-31496 |
| State | PUBLISHED |
| Assigner | Linux |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2026-04-22 14:16:47 UTC |
| Updated | 2026-04-22 14:16:47 UTC |
| Description | In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_conntrack_expect: skip expectations in other netns via proc
Skip expectations that do not reside in this netns.
Similar to e77e6ff502ea ("netfilter: conntrack: do not dump other netns's
conntrack entries via proc"). |
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|
| CNA |
Linux |
Linux |
affected 9b03f38d0487f3908696242286d934c9b38f9d2a 2028405ea6987b4448784e439413202cfe19f43f git |
Not specified |
| CNA |
Linux |
Linux |
affected 9b03f38d0487f3908696242286d934c9b38f9d2a 168145c87444619e3e649322bbe7719ecd00d411 git |
Not specified |
| CNA |
Linux |
Linux |
affected 9b03f38d0487f3908696242286d934c9b38f9d2a dcfcd95b3ae7683e8ae55c92284b3430ce614bc7 git |
Not specified |
| CNA |
Linux |
Linux |
affected 9b03f38d0487f3908696242286d934c9b38f9d2a 9ca8c7452493d915f9bbf2f39331e6c583d07a23 git |
Not specified |
| CNA |
Linux |
Linux |
affected 9b03f38d0487f3908696242286d934c9b38f9d2a 3265ad619987cb551edaf797ed056d80ac450225 git |
Not specified |
| CNA |
Linux |
Linux |
affected 9b03f38d0487f3908696242286d934c9b38f9d2a 3db5647984de03d9cae0dcddb509b058351f0ee4 git |
Not specified |
| CNA |
Linux |
Linux |
affected 2.6.28 |
Not specified |
| CNA |
Linux |
Linux |
unaffected 2.6.28 semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 6.1.168 6.1.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 6.6.131 6.6.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 6.12.80 6.12.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 6.18.21 6.18.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 6.19.11 6.19.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 7.0 * original_commit_for_fix |
Not specified |
References
| Reference | Source | Link | Tags |
|---|
| git.kernel.org/stable/c/2028405ea6987b4448784e439413202cfe19f43f |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/3265ad619987cb551edaf797ed056d80ac450225 |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/168145c87444619e3e649322bbe7719ecd00d411 |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/9ca8c7452493d915f9bbf2f39331e6c583d07a23 |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/dcfcd95b3ae7683e8ae55c92284b3430ce614bc7 |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/3db5647984de03d9cae0dcddb509b058351f0ee4 |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.