CVE-2026-72419: netfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init()

Q: What is the severity of CVE-2026-72419?

The severity of CVE-2026-72419 is rated at 34, indicating a medium risk level.

Q: How do I fix CVE-2026-72419?

To resolve CVE-2026-72419, ensure that you upgrade to the patched version of the Linux kernel that addresses this vulnerability.

Q: What systems are affected by CVE-2026-72419?

CVE-2026-72419 affects the Linux kernel, specifically the netfilter module associated with NAT operations.

Q: What type of vulnerability is CVE-2026-72419?

CVE-2026-72419 is classified under CWE XEE, indicating it involves improper handling of a pointer leading to potential system instability.

Q: What are the potential impacts of CVE-2026-72419?

The potential impacts of CVE-2026-72419 include system crashes or disruptions in NAT functionality due to invalid memory access.

Published Aug 15, 2026

Updated

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nfnat: avoid invalid natnet pointer use on failed nfnatinit()

We ran into below KASAN splat, which is mostly uninteresting, beside for having nfnatregisterfn() in the call chain as a cause for the offending access:

================================================================== BUG: KASAN: slab-out-of-bounds in nfnatregisterfn+0x5f9/0x640 Read of size 8 at addr ffff890031e54c20 by task iptables/9510

CPU: 0 UID: 0 PID: 9510 Comm: iptables Not tainted 6.18.18-grsec-full-20260320181326 #1 PREEMPT(voluntary) Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 Call Trace: <TASK> […] dumpstacklvl+0xee/0x160 ffff88004117eeb8 […] printreport+0x6e/0x640 ffff88004117eee0 […] ? physaddr+0x8e/0x140 ffff88004117eef0 […] ? kasanaddrtoslab+0x51/0xe0 ffff88004117ef08 […] ? completereportinfo+0xec/0x1c0 ffff88004117ef20 […] ? nfnatregisterfn+0x5f9/0x640 ffff88004117ef48 […] kasanreport+0xbc/0x140 ffff88004117ef50 […] ? nfnatregisterfn+0x5f9/0x640 ffff88004117ef90 […] nfnatregisterfn+0x5f9/0x640 ffff88004117eff8 […] ? nfnaticmpreplytranslation+0x6e0/0x6e0 ffff88004117f070 […] nftablesregisterhook.part.0+0xa0/0x220 ffff88004117f080 […] nftablesaddchain.constprop.0+0x1054/0x1fc0 ffff88004117f0b8 […] ? nftchainlookup.part.0+0x4ce/0xac0 ffff88004117f130 […] ? nftablesabort+0x3d80/0x3d80 ffff88004117f190 […] ? nftablesdumpresetobj+0x100/0x100 ffff88004117f1c8 […] ? nfttablelookup.part.0+0x255/0x300 ffff88004117f310 […] ? nftablesnewchain+0x21a4/0x2fa0 ffff88004117f358 […] nftablesnewchain+0x21a4/0x2fa0 ffff88004117f360 […] ? nftablesaddchain.constprop.0+0x1fc0/0x1fc0 ffff88004117f458 […] ? nlagetrangesigned+0x4a0/0x4a0 ffff88004117f488 […] ? lockacquire+0x16f/0x320 ffff88004117f490 […] ? findheldlock+0x3b/0xe0 ffff88004117f4b0 […] ? nlaparse+0x45/0x80 ffff88004117f500 […] nfnetlinkrcvbatch+0xbca/0x19a0 ffff88004117f550 […] ? nfnetlinknetexitbatch+0x120/0x120 ffff88004117f618 […] ? sanitizercovtraceswitch+0x63/0xe0 ffff88004117f720 […] ? graclhandlemmap+0x1c4/0x320 ffff88004117f7c0 […] ? nlagetrangesigned+0x4a0/0x4a0 ffff88004117f7e8 […] ? griscapable+0x6f/0xe0 ffff88004117f830 […] ? nlaparse+0x45/0x80 ffff88004117f860 […] ? skbpull+0x103/0x1a0 ffff88004117f880 […] nfnetlinkrcv+0x3db/0x4a0 ffff88004117f8b0 […] ? nfnetlinkrcvbatch+0x19a0/0x19a0 ffff88004117f8d8 […] ? netlinklookup+0xe2/0x240 ffff88004117f900 […] netlinkunicast+0x74b/0xb00 ffff88004117f930 […] ? netlinkattachskb+0xb20/0xb20 ffff88004117f980 […] ? checkobjectsize+0x3e/0xaa0 ffff88004117f998 […] ? securitynetlinksend+0x51/0x160 ffff88004117f9c8 […] netlinksendmsg+0xa03/0x1200 ffff88004117f9f8 […] ? netlinkunicast+0xb00/0xb00 ffff88004117fa70 […] ? netlinkunicast+0xb00/0xb00 ffff88004117fac8 […] ? syssendmsg+0xe2a/0x1040 ffff88004117faf8 […] syssendmsg+0xe2a/0x1040 ffff88004117fb00 […] ? kernelrecvmsg+0x300/0x300 ffff88004117fb60 […] ? reacquireheldlocks+0xe9/0x260 ffff88004117fbc8 […] syssendmsg+0x138/0x200 ffff88004117fbf8 […] ? dorecvmmsg+0x7e0/0x7e0 ffff88004117fc30 […] ? lockdephardirqsonprepare+0x101/0x1e0 ffff88004117fc50 […] ? lockacquire+0x16f/0x320 ffff88004117fd20 […] ? lockacquire+0x16f/0x320 ffff88004117fd58 […] ? findheldlock+0x3b/0xe0 ffff88004117fd70 […] syssendmsg+0x17a/0x260 ffff88004117fdc8 […] ? syssendmsgsock+0x80/0x80 ffff88004117fdf0 […] ? syscalltraceenter+0x15e/0x2c0 ffff88004117fe98 […] dosyscall64+0x7d/0x400 ffff88004117fec8 […] entrySYSCALL64safestack+0x4a/0x60 ffff88004117fef8 </TASK> ==================================================================

The out-of-bounds report, though, is a red herring as it is f ---truncated---

Affected Software

162 affected componentsFixes available

Linux Linux kernel

ubuntu/linux-hwe-edge*

ubuntu/linux-aws-5.0*

ubuntu/linux-aws-5.3*

ubuntu/linux-azure*

ubuntu/linux-azure-5.3*

ubuntu/linux-azure-edge*

ubuntu/linux-gcp*

ubuntu/linux-gcp-5.3*

ubuntu/linux-gke-4.15*

ubuntu/linux-gke-5.4*

ubuntu/linux-gkeop-5.4*

ubuntu/linux-hwe*

ubuntu/linux-hwe-edge*

ubuntu/linux-oem*

ubuntu/linux-oracle-5.0*

ubuntu/linux-oracle-5.3*

ubuntu/linux-aws-5.11*

ubuntu/linux-aws-5.13*

ubuntu/linux-aws-5.8*

ubuntu/linux-azure-5.11*

ubuntu/linux-azure-5.13*

ubuntu/linux-azure-5.8*

ubuntu/linux-azure-fde*

ubuntu/linux-gcp-5.11*

ubuntu/linux-gcp-5.13*

ubuntu/linux-gcp-5.8*

ubuntu/linux-gke*

ubuntu/linux-gke-5.15*

ubuntu/linux-gkeop*

ubuntu/linux-gkeop-5.15*

ubuntu/linux-hwe-5.11*

ubuntu/linux-hwe-5.13*

ubuntu/linux-hwe-5.8*

ubuntu/linux-intel-5.13*

ubuntu/linux-oem-5.10*

ubuntu/linux-oem-5.13*

ubuntu/linux-oem-5.6*

ubuntu/linux-oracle-5.11*

ubuntu/linux-oracle-5.13*

ubuntu/linux-oracle-5.8*

ubuntu/linux-raspi2*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.11*

ubuntu/linux-riscv-5.8*

ubuntu/linux-allwinner-5.19*

ubuntu/linux-aws-5.19*

ubuntu/linux-aws-6.2*

ubuntu/linux-aws-6.5*

ubuntu/linux-aws-6.8*

ubuntu/linux-azure-5.19*

ubuntu/linux-azure-6.2*

ubuntu/linux-azure-6.5*

ubuntu/linux-azure-6.8*

ubuntu/linux-azure-fde-5.19*

ubuntu/linux-azure-fde-6.2*

ubuntu/linux-azure-fde-6.8*

ubuntu/linux-gcp-5.19*

ubuntu/linux-gcp-6.2*

ubuntu/linux-gcp-6.5*

ubuntu/linux-gcp-6.8*

ubuntu/linux-hwe-5.19*

ubuntu/linux-hwe-6.2*

ubuntu/linux-hwe-6.5*

ubuntu/linux-ibm-6.8*

ubuntu/linux-intel-iot-realtime*

ubuntu/linux-lowlatency-hwe-5.19*

ubuntu/linux-lowlatency-hwe-6.2*

ubuntu/linux-lowlatency-hwe-6.5*

ubuntu/linux-lowlatency-hwe-6.8*

ubuntu/linux-nvidia-6.2*

ubuntu/linux-nvidia-6.5*

ubuntu/linux-nvidia-6.8*

ubuntu/linux-oem-5.17*

ubuntu/linux-oem-6.0*

ubuntu/linux-oem-6.1*

ubuntu/linux-oem-6.5*

ubuntu/linux-oracle-6.5*

ubuntu/linux-oracle-6.8*

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.19*

ubuntu/linux-riscv-6.5*

ubuntu/linux-riscv-6.8*

ubuntu/linux-starfive-5.19*

ubuntu/linux-starfive-6.2*

ubuntu/linux-starfive-6.5*

ubuntu/linux-realtime-6.8*

ubuntu/linux<6.8.0-147.147

6.8.0-147.147

ubuntu/linux-aws<6.8.0-1067.70

6.8.0-1067.70

ubuntu/linux-aws-6.14*

ubuntu/linux-aws-6.17*

ubuntu/linux-aws-7.0<7.0.0-1014.14~24.04.1

7.0.0-1014.14~24.04.1

ubuntu/linux-azure<6.8.0-1071.79

6.8.0-1071.79

ubuntu/linux-azure-6.11*

ubuntu/linux-azure-6.14*

ubuntu/linux-azure-6.17*

ubuntu/linux-azure-7.0<7.0.0-1017.17~24.04.1

7.0.0-1017.17~24.04.1

ubuntu/linux-azure-fde<6.8.0-1069.76

6.8.0-1069.76

ubuntu/linux-azure-fde-6.14*

ubuntu/linux-azure-fde-6.17*

ubuntu/linux-azure-fde-7.0<7.0.0-1016.16~24.04.1

7.0.0-1016.16~24.04.1

ubuntu/linux-azure-nvidia*

ubuntu/linux-azure-nvidia-6.14*

ubuntu/linux-gcp<6.8.0-1071.79

6.8.0-1071.79

ubuntu/linux-gcp-6.11*

ubuntu/linux-gcp-6.14*

ubuntu/linux-gcp-7.0<7.0.0-1014.14~24.04.1

7.0.0-1014.14~24.04.1

ubuntu/linux-gke<6.8.0-1066.74

6.8.0-1066.74

ubuntu/linux-gkeop<6.8.0-1052.56

6.8.0-1052.56

ubuntu/linux-hwe-6.11*

ubuntu/linux-hwe-6.14*

ubuntu/linux-hwe-6.17*

ubuntu/linux-hwe-7.0<7.0.0-38.38~24.04.4

7.0.0-38.38~24.04.4

ubuntu/linux-ibm<6.8.0-1067.68

6.8.0-1067.68

ubuntu/linux-lowlatency<6.8.0-147.147.1

6.8.0-147.147.1

ubuntu/linux-lowlatency-hwe-6.11*

ubuntu/linux-nvidia*

ubuntu/linux-nvidia-6.11*

ubuntu/linux-nvidia-6.17*

ubuntu/linux-nvidia-7.0*

ubuntu/linux-nvidia-lowlatency*

ubuntu/linux-nvidia-tegra<6.8.0-1036.39

6.8.0-1036.39

ubuntu/linux-oem-6.11*

ubuntu/linux-oem-6.14*

ubuntu/linux-oem-6.17*

ubuntu/linux-oem-6.8*

ubuntu/linux-oracle<6.8.0-1064.67

6.8.0-1064.67

ubuntu/linux-oracle-6.14*

ubuntu/linux-oracle-6.17*

ubuntu/linux-oracle-7.0<7.0.0-1013.13~24.04.1

7.0.0-1013.13~24.04.1

ubuntu/linux-raspi*

ubuntu/linux-raspi-realtime*

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-riscv-6.14*

ubuntu/linux-riscv-6.17*

ubuntu/linux-riscv-7.0<7.0.0-38.38.1~24.04.1

7.0.0-38.38.1~24.04.1

ubuntu/linux-xilinx*

ubuntu/linux-bluefield<6.8.0-1033.38

6.8.0-1033.38

ubuntu/linux-raspi-realtime*

ubuntu/linux-realtime<6.8.1-1062.63

6.8.1-1062.63

ubuntu/linux-realtime-6.14*

ubuntu/linux-realtime-6.17*

ubuntu/linux-aws-fips<6.8.0-1067.70+fips1

6.8.0-1067.70+fips1

ubuntu/linux-azure-fips<6.8.0-1071.79+fips1

6.8.0-1071.79+fips1

ubuntu/linux-fips<6.8.0-147.147+fips1

6.8.0-147.147+fips1

ubuntu/linux-gcp-fips<6.8.0-1071.79+fips1

6.8.0-1071.79+fips1

ubuntu/linux<7.0.0-38.38

7.0.0-38.38

ubuntu/linux-aws<7.0.0-1014.14

7.0.0-1014.14

ubuntu/linux-azure<7.0.0-1017.17

7.0.0-1017.17

ubuntu/linux-azure-fde<7.0.0-1016.16

7.0.0-1016.16

ubuntu/linux-gcp<7.0.0-1014.14

7.0.0-1014.14

ubuntu/linux-gke<7.0.0-1008.9

7.0.0-1008.9

ubuntu/linux-ibm<7.0.0-1015.15

7.0.0-1015.15

ubuntu/linux-nvidia*

ubuntu/linux-nvidia-bos*

ubuntu/linux-oem-7.0<7.0.0-1015.15

7.0.0-1015.15

ubuntu/linux-oracle<7.0.0-1013.13

7.0.0-1013.13

ubuntu/linux-raspi*

ubuntu/linux-realtime<7.0.0-38.38.1

7.0.0-38.38.1

ubuntu/linux-riscv<7.0.0-38.38.1

7.0.0-38.38.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 6.8.0-147.147
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 6.8.0-1067.70
Upgrade
Upgrade ubuntu/linux-aws-7.0 to a version that resolves this vulnerability.
Fixed in 7.0.0-1014.14~24.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 6.8.0-1071.79
Upgrade
Upgrade ubuntu/linux-azure-7.0 to a version that resolves this vulnerability.
Fixed in 7.0.0-1017.17~24.04.1
Upgrade
Upgrade ubuntu/linux-azure-fde to a version that resolves this vulnerability.
Fixed in 6.8.0-1069.76
Upgrade
Upgrade ubuntu/linux-azure-fde-7.0 to a version that resolves this vulnerability.
Fixed in 7.0.0-1016.16~24.04.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 6.8.0-1071.79
Upgrade
Upgrade ubuntu/linux-gcp-7.0 to a version that resolves this vulnerability.
Fixed in 7.0.0-1014.14~24.04.1
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 6.8.0-1066.74
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 6.8.0-1052.56
Upgrade
Upgrade ubuntu/linux-hwe-7.0 to a version that resolves this vulnerability.
Fixed in 7.0.0-38.38~24.04.4
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 6.8.0-1067.68
Upgrade
Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.
Fixed in 6.8.0-147.147.1
Upgrade
Upgrade ubuntu/linux-nvidia-tegra to a version that resolves this vulnerability.
Fixed in 6.8.0-1036.39
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 6.8.0-1064.67
Upgrade
Upgrade ubuntu/linux-oracle-7.0 to a version that resolves this vulnerability.
Fixed in 7.0.0-1013.13~24.04.1
Upgrade
Upgrade ubuntu/linux-riscv-7.0 to a version that resolves this vulnerability.
Fixed in 7.0.0-38.38.1~24.04.1
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 6.8.0-1033.38
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 6.8.1-1062.63
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 6.8.0-1067.70+fips1
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 6.8.0-1071.79+fips1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 6.8.0-147.147+fips1
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 6.8.0-1071.79+fips1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 7.0.0-38.38
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 7.0.0-1014.14
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 7.0.0-1017.17
Upgrade
Upgrade ubuntu/linux-azure-fde to a version that resolves this vulnerability.
Fixed in 7.0.0-1016.16
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 7.0.0-1014.14
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 7.0.0-1008.9
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 7.0.0-1015.15
Upgrade
Upgrade ubuntu/linux-oem-7.0 to a version that resolves this vulnerability.
Fixed in 7.0.0-1015.15
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 7.0.0-1013.13
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 7.0.0-38.38.1
Upgrade
Upgrade ubuntu/linux-riscv to a version that resolves this vulnerability.
Fixed in 7.0.0-38.38.1

Event History

Aug 15, 2026

CVE Published

via MITRE·05:56 AM

Data Sourced

via MITRE·05:56 AM

DescriptionSeverity

Data Sourced

via OSV·06:22 AM

DescriptionSeverityAffected Software

Data Sourced

via NVD·06:22 AM

DescriptionSeverity

Frequently Asked Questions

What is the severity of CVE-2026-72419?

The severity of CVE-2026-72419 is rated at 34, indicating a medium risk level.

How do I fix CVE-2026-72419?

To resolve CVE-2026-72419, ensure that you upgrade to the patched version of the Linux kernel that addresses this vulnerability.

What systems are affected by CVE-2026-72419?

CVE-2026-72419 affects the Linux kernel, specifically the netfilter module associated with NAT operations.

What type of vulnerability is CVE-2026-72419?

CVE-2026-72419 is classified under CWE XEE, indicating it involves improper handling of a pointer leading to potential system instability.

What are the potential impacts of CVE-2026-72419?

The potential impacts of CVE-2026-72419 include system crashes or disruptions in NAT functionality due to invalid memory access.

CVE-2026-72419: netfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init()

Affected Software

Remediation

Event History

Frequently Asked Questions

What is the severity of CVE-2026-72419?

How do I fix CVE-2026-72419?

What systems are affected by CVE-2026-72419?

What type of vulnerability is CVE-2026-72419?

What are the potential impacts of CVE-2026-72419?

Company

Resources

Contact