THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-43116 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: ensure safe access to master conntrack Holding reference on the expectation is not sufficient, the master conntrack object can just go away, making exp->master invalid. To access exp->mas

[NVD] CVE-2026-43116 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: ensure safe access to master conntrack Holding reference on the expectation is not sufficient, the master conntrack object can just go away, making exp->master invalid. To access exp->mas

lownvdPublished 2026-05-06

CVE-2026-43116 CVSS: 7.8 HIGH Published: 2026-05-06T10:16:25.400

In the Linux kernel, the following vulnerability has been resolved:

netfilter: ctnetlink: ensure safe access to master conntrack

Holding reference on the expectation is not sufficient, the master conntrack object can just go away, making exp->master invalid.

To access exp->master safely:

- Grab the nf_conntrack_expect_lock, this

Indicators of compromise

CVE-2026-43116cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-43116