CVE-2026-98873
Last modified
CVE-2026-98873 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_expect: zero at allocation time There are occasional LLM hints wrt. leaking uninitialized data to userspace via ctnetlink. EPSS estimates a 0.18% chance of exploitation in the next 30 days.
Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_expect: zero at allocation time There are occasional LLM hints wrt. leaking uninitialized data to userspace via ctnetlink. Just zero at allocation time, expectations are not frequently used these days. Intentionally keeps _init as-is because we could theoretically support re-init, so add the missing exp->dir there.
Metrics
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= 076a0ca02644657b13e4af363f487ced2942e9cb, < 39cb6ff947c16a576ea68c5f272e634acdcb0085; >= 076a0ca02644657b13e4af363f487ced2942e9cb, < 90545aa07a183887e9d72ce573c18e08f62e2c91; >= 076a0ca02644657b13e4af363f487ced2942e9cb, < 9c11d7ea5ff4dbe162e79f00188814ef5483c295; >= 076a0ca02644657b13e4af363f487ced2942e9cb, < b7f3ee925aee9f1f547d539bc03c35433c238958; >= 076a0ca02644657b13e4af363f487ced2942e9cb, < 824397af7bfe14edad374c64253dae0187ca623d; >= 076a0ca02644657b13e4af363f487ced2942e9cb, < a39ecb856514274c80d0fac4d128dba6b266a8ed; >= 076a0ca02644657b13e4af363f487ced2942e9cb, < 241ccd2fed9051db443aadce248fc0ab30f55e97 |
| Linux | Linux | 3.4 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-98873?
How severe is CVE-2026-98873?
How do I fix CVE-2026-98873?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-98868In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98869In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-9887Use after free in Proxy in Google Chrome prior to 148.0.7778…8.8
- CVE-2026-98870In the Linux kernel, the following vulnerability has been re…8.8
- CVE-2026-98871In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98872In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98874In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98875In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98876In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98877In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98878In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98879In the Linux kernel, the following vulnerability has been re…
Are you affected by CVE-2026-98873?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST