CVE-2026-98873

A flaw was found in the Linux kernel's Netfilter connection tracking subsystem. Memory allocated for tracking expected network connections was not properly cleared upon allocation. A local user could exploit this vulnerability by querying connection tracking records via the Netlink interface, leading to an information disclosure of uninitialized kernel memory.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.