CVE-2026-98490

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A Use-After-Free (UAF) issue exists in the openvswitch conntrack component. The problem occurs when a raw pointer to the extensions area is stored in the expectations list during the execution of nf ct helper(). If additional extensions are added via * ext add() calls, the extension space is reallocated, rendering the stored pointer invalid. This invalid pointer is subsequently accessed when removing the expectation, potentially leading to a system crash or memory corruption.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.