CVE-2026-74347

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the netfilter cttimeout component regarding the management of the nf ct timeout structure refcount. The system previously used a refcount for the control plane to track if the ruleset referred to a timeout policy, which complicated the immediate removal of timeout policies from nfnetlink cttimeout. The fix involves repurposing the refcount to track usage by conntrack entries in the dataplane, ensuring the nf ct timeout object is released only when the last conntrack entry drops its reference. Additionally, the nf queue nf hook drop() function was removed because packets in the nfqueue maintain a reference to the nf ct timeout object until reinjection. The nf ct untimeout() function is now used on a best-effort basis for cleanup and is no longer called during the module removal path.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.