Strix
73.2K

CVE-2026-98793

UnknownEPSS 0.17%

Last modified

CVE-2026-98793 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: netfilter: bpf: reject invalid NAT manipulation types As bpf_ct_set_nat_info() is not validating the NAT manipulation type a wrong value can be passed directly to nf_nat_setup_info(). This triggers the WARN_ON() at nf_nat_setup_info() and if panic_on_warn isn't set, then IPS_SRC_NAT_DONE is set without adding nat_bysource and conntrack cleanup tries to unlink an uninitialized hlist node. Fix this by checking that NAT manipulation type is correct before calling nf_nat_setup_info(). EPSS estimates a 0.17% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: bpf: reject invalid NAT manipulation types As bpf_ct_set_nat_info() is not validating the NAT manipulation type a wrong value can be passed directly to nf_nat_setup_info(). This triggers the WARN_ON() at nf_nat_setup_info() and if panic_on_warn isn't set, then IPS_SRC_NAT_DONE is set without adding nat_bysource and conntrack cleanup tries to unlink an uninitialized hlist node. Fix this by checking that NAT manipulation type is correct before calling nf_nat_setup_info(). In addition, if the WARN_ON is hit, return NF_DROP instead of continuing with the processing to avoid similar situations in the future.

Metrics

EPSS Probability
0.17%

6.0th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 0fabd2aa199faeb8754aee94658f2c48ccb2c8c3, < ce7b41f0e4b5db0580d0a2059a0c9e672b461b5e; >= 0fabd2aa199faeb8754aee94658f2c48ccb2c8c3, < 752492947be3123ea6c689e2f93ae04ecd675d42; >= 0fabd2aa199faeb8754aee94658f2c48ccb2c8c3, < ea777dc90ab37e64fa4b92f6fcf3b5edcef5e058; >= 0fabd2aa199faeb8754aee94658f2c48ccb2c8c3, < f6143ae109df56d51d5536e813deb19eee7a6205; >= 0fabd2aa199faeb8754aee94658f2c48ccb2c8c3, < 58108f05b0502448f6bb612ee2eccc63bd6449cb; >= 0fabd2aa199faeb8754aee94658f2c48ccb2c8c3, < 16d464013ec2267b00a83f4bfbb97b3ecc63bfa7
LinuxLinux6.1

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-98793?
In the Linux kernel, the following vulnerability has been resolved: netfilter: bpf: reject invalid NAT manipulation types As bpf_ct_set_nat_info() is not validating the NAT manipulation type a wrong value can be passed directly to nf_nat_setup_info(). This triggers the WARN_ON() at nf_nat_setup_info() and if panic_on_warn isn't set, then IPS_SRC_NAT_DONE is set without adding nat_bysource and conntrack cleanup tries to unlink an uninitialized hlist node. Fix this by checking that NAT manipulation type is correct before calling nf_nat_setup_info(). In addition, if the WARN_ON is hit, return NF_DROP instead of continuing with the processing to avoid similar situations in the future.
How severe is CVE-2026-98793?
Severity scoring for CVE-2026-98793 is pending analysis. The EPSS model estimates a 0.17% probability of exploitation in the next 30 days.
How do I fix CVE-2026-98793?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-98793?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST