CVE-2026-98442

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A Use-After-Free (UAF) issue exists in the net/sched: act ct component. This occurs when a raw pointer to the extensions area is added to the expectations list during the execution of nf ct helper() through nf ct expect insert(). If additional extensions are added via * ext add() calls, the extension space is reallocated, rendering the existing pointer in the expectations list invalid. This invalid pointer is subsequently accessed during the removal of the expectation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.