CVE-2026-43450

A flaw was found in the Linux kernel's nfnetlink_cthelper component. This vulnerability, an out-of-bounds read, occurs in the nfnl_cthelper_dump_table() function when a network connection tracking helper is removed during a dump operation, leading to a bypassed bounds check. A local attacker could exploit this to cause a system crash (denial of service) or potentially access sensitive information from kernel memory.

Red Hat has evaluated this vulnerability as Moderate because exploitation requires local system access to query netfilter connection-tracking tables, restricting the threat scope to local denial of service or unintended kernel memory disclosure. In default Red Hat Enterprise Linux environments, user-space connection-tracking helper infrastructure is not actively utilized, significantly reducing common exposure. Triggering the boundary flaw requires racing table dump requests against helper removals through local netlink sockets.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.