CVE-2026-98321

Unknown

Last modified

CVE-2026-98321 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat: unregister and release hooks on error If nf_hook_entries_insert_raw() fails, the NAT hooks get never released, resulting in a memleak. Postpone setting nat_proto_net->nat_hook_ops when the hooks are registered to simplify the error path to decide whether the nat hooks need unwinding..

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat: unregister and release hooks on error If nf_hook_entries_insert_raw() fails, the NAT hooks get never released, resulting in a memleak. Postpone setting nat_proto_net->nat_hook_ops when the hooks are registered to simplify the error path to decide whether the nat hooks need unwinding.

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 1cd472bf036ca038e783ef5f058f54e45b7e8180, < 79084567cd082fb4482e1ea457580e7d6504dd99; >= 1cd472bf036ca038e783ef5f058f54e45b7e8180, < df80342f4bfc023ad7d6703df5e27f583ff0cb8d; >= 1cd472bf036ca038e783ef5f058f54e45b7e8180, < cbdd39ce42530a193c56beb206a3356cb6d01016
LinuxLinux4.18

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-98321?
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat: unregister and release hooks on error If nf_hook_entries_insert_raw() fails, the NAT hooks get never released, resulting in a memleak. Postpone setting nat_proto_net->nat_hook_ops when the hooks are registered to simplify the error path to decide whether the nat hooks need unwinding.
How severe is CVE-2026-98321?
Severity scoring for CVE-2026-98321 is pending analysis.
How do I fix CVE-2026-98321?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

Are you affected by CVE-2026-98321?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST