CVE-2026-98322

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft nat: fully initialise new addr in netmap setup

nft nat setup netmap() builds the mapped address in an on-stack union nf inet addr. For an IPv4 mapping it writes only the 4-byte .ip member and the loop runs a single 32-bit iteration, but it then copies the whole 16-byte union into range->min addr and range->max addr, so the upper 12 bytes reach nf nat setup info() uninitialised.

KMSAN reports an uninit-value in nf nat setup info() reached from nft nat eval(). The IPv6 path fills all 16 bytes and is not affected.

Zero-initialise new addr.