PT-2026-37063 · Linux · Linux Kernel

Published 2026-05-05 · Updated 2026-05-26 · CVE-2026-43060

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the netfilter nft ct component where packets remaining in the nfqueue may maintain references to conntrack timeout policies, helpers, or templates specifying the conntrack zone. Because these objects can be removed—particularly when a percpu area is used and module removal occurs—stale references may persist, potentially leading to system instability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-43060

Affected Products

Linux Kernel

References · 20

• https://ubuntu.com/security/CVE-2026-43060 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-43060 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2026-43060 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-43060 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2026-43060 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-43060 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-43060 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-43060 · Vendor Advisory
• https://git.kernel.org/stable/c/6802ff8beceb9c4254318e81c1395720438f2cc2 · Note
• https://t.me/cveNotify/164546 · Telegram Post
• https://docs.bell-sw.com/security/cves/CVE-2026-43060 · Note
• https://git.kernel.org/stable/c/8a64e76933672b08bd85b63086f33432070fd729 · Note
• https://git.kernel.org/stable/c/ab50302190b303f847c4eba0e31a01a56dec596e · Note
• https://git.kernel.org/linus/36eae0956f659e48d5366d9b083d9417f3263ddc · Note
• https://git.kernel.org/stable/c/36eae0956f659e48d5366d9b083d9417f3263ddc · Note