CVE-2026-52970: netfilter: nft_ct: fix missing expect put in obj eval

Published Jun 24, 2026
·
Updated

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nftct: fix missing expect put in obj eval

nftctexpectobjeval() allocates an expectation and may call nfctexpectrelated(), but never drops its local reference.

Add nfctexpectput(exp) before return to balance allocation.

Affected Software

12 affected componentsFixes available
Linux Linux kernel (netfilter nft_ct)
Microsoft azl3 kernel 6.6.139.1-1<6.6.143.1-1
6.6.143.1-1
Linux Linux kernel>=5.3<5.10.258
Linux Linux kernel>=5.11<5.15.209
Linux Linux kernel>=5.16<6.1.175
Linux Linux kernel>=6.2<6.6.141
Linux Linux kernel>=6.7<6.12.91
Linux Linux kernel>=6.13<6.18.33
Linux Linux kernel>=6.19<7.0.10
Linux Linux kernel=7.1-rc1
Linux Linux kernel=7.1-rc2
Linux Linux kernel=7.1-rc3

Event History

Jun 24, 2026
CVE Published
via MITRE·04:28 PM
Data Sourced
via MITRE·04:28 PM
Description
Data Sourced
via NVD·05:17 PM
RemedyDescriptionSeverityAffected Software
Jun 27, 2026
Data Sourced
via Microsoft·08:15 AM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·08:15 AM
Affected Software
Updated
via Microsoft·08:15 AM
DescriptionSeverity

Frequently Asked Questions

1

What is the severity of CVE-2026-52970?

CVE-2026-52970 has a risk rating of 27, indicating a moderate severity level.

2

How do I fix CVE-2026-52970?

To fix CVE-2026-52970, update to the latest version of the Linux kernel that addresses this vulnerability.

3

What systems are affected by CVE-2026-52970?

CVE-2026-52970 affects systems running the affected versions of the Linux kernel with netfilter nft_ct.

4

What is the exploit mechanism for CVE-2026-52970?

The exploit mechanism involves a failure to release a local reference when allocating an expectation in the netfilter component.

5

Is CVE-2026-52970 a remote or local vulnerability?

CVE-2026-52970 is generally considered a local vulnerability, as it affects the kernel's handling of network connections.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203