CVE-2026-72252

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory allocation failure in the netfilter module can cause a cloned nft pipapo match structure to enter an inconsistent state. This occurs when lookup tables are partially resized, bits are toggled, or the scratch map is undersized, resulting in m->bsize max being lower than required. Consequently, subsequent insertions within the same batch can trigger out-of-bounds writes. Additionally, if the initial insertion fails, the corrupted clone may persist into future transactions because the abort callback is not executed when the upper layer detects the error before a transactional request is allocated.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.