CVE-2026-80664

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description In the netfilter module, the xt nat SNAT and DNAT target handlers assume that IP-family conntrack state is present. When instantiated from an unsupported family through nft compat, such as a bridge-family compat rule, the system can trigger a NULL-dereference in the nf nat setup info() function. A NULL-dereference occurs when a program attempts to read or write to a memory address that is NULL, typically leading to a system crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.