CVE-2026-43025

A flaw was found in the Linux kernel's netfilter component. A local user could exploit a slab-out-of-bounds vulnerability by providing a different helper than the existing master conntrack helper when creating new expectations. This could allow an attacker to read kernel memory bytes off the expectation boundary, leading to information disclosure.

Ctnetlink must ignore explicit helper assignment on new expectations to match documented semantics and avoid inconsistent conntrack state. Red Hat recommends patched kernels for nftables/nf_conntrack netfilter users.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.