PT-2026-51864 · Linux · Linux

Published 2026-06-24 · Updated 2026-06-24 · CVE-2026-52970

NVD

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft ct: fix missing expect put in obj eval

nft ct expect obj eval() allocates an expectation and may call nf ct expect related(), but never drops its local reference.

Add nf ct expect put(exp) before return to balance allocation.

Related Identifiers

CVE-2026-52970

Affected Products

Linux

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2026-52970 · Security Note
• https://git.kernel.org/stable/c/1dced0725e2fae3ac3416274db20a7ff5a46931d · Note
• https://git.kernel.org/stable/c/19f94b6fee75b3ef7fbc06f3745b9a771a8a19a4 · Note
• https://git.kernel.org/stable/c/26ab32ec73941871c97562ee1f39587950dc3b68 · Note
• https://git.kernel.org/stable/c/cdb9a25dd3416d427e8b2753210f8baf44207577 · Note
• https://git.kernel.org/stable/c/84c422cea5a45fe56be839f25880f21fd33940cd · Note
• https://git.kernel.org/stable/c/ecca618e1e339494911090474ed87742c0f73976 · Note
• https://git.kernel.org/stable/c/2aef1b13d5c0285f340512c6c07eb858fd018fd8 · Note
• https://git.kernel.org/stable/c/7b96242ceedfe249f158419f3254bcee04173ffe · Note