CVE-2025-71146 (GCVE-0-2025-71146)
Vulnerability from cvelistv5
Published
2026-01-23 14:15
Modified
2026-02-09 08:35
Severity ?
Summary
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: fix leaked ct in error paths There are some situations where ct might be leaked as error paths are skipping the refcounted check and return immediately. In order to solve it make sure that the check is always called.
References
Impacted products
Vendor Product Version
Linux Linux Version: 6e86f0eca857ee42787e30e9ec0b726aebfcae0a
Version: b160895d6bc9690459b16ef87799c9bd456af3ec
Version: 8d5a2c94c24dcc226863a7c2b5034750370c2189
Version: da9f247fb5efcd5a2730cdc989291b383c439e10
Version: 3558faee8aace3541189c3a2ca45c7e85e144b44
Version: f6904ed15ed1a188543057e3cb0d02daa80edfc9
Version: be102eb6a0e7c03db00e50540622f4e43b2d2844
Version: 8c2da7330214ce30f8333d1799a27ed0a9418f07
 Create a notification for this product.
   Linux Linux Version: 6.12.63   ≤
Version: 6.18.2   ≤
Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/netfilter/nf_conncount.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "08fa37f4c8c59c294e9c18fea2d083ee94074e5a",
              "status": "affected",
              "version": "6e86f0eca857ee42787e30e9ec0b726aebfcae0a",
              "versionType": "git"
            },
            {
              "lessThan": "e1ac8dce3a893641bef224ad057932f142b8a36f",
              "status": "affected",
              "version": "b160895d6bc9690459b16ef87799c9bd456af3ec",
              "versionType": "git"
            },
            {
              "lessThan": "f381a33f34dda9e4023e38ba68c943bca83245e9",
              "status": "affected",
              "version": "8d5a2c94c24dcc226863a7c2b5034750370c2189",
              "versionType": "git"
            },
            {
              "lessThan": "325eb61bb30790ea27782203a17b007ce1754a67",
              "status": "affected",
              "version": "da9f247fb5efcd5a2730cdc989291b383c439e10",
              "versionType": "git"
            },
            {
              "lessThan": "0b88be7211d21a0d68bb1e56dc805944e3654d6f",
              "status": "affected",
              "version": "3558faee8aace3541189c3a2ca45c7e85e144b44",
              "versionType": "git"
            },
            {
              "lessThan": "4bd2b89f4028f250dd1c1625eb3da1979b04a5e8",
              "status": "affected",
              "version": "f6904ed15ed1a188543057e3cb0d02daa80edfc9",
              "versionType": "git"
            },
            {
              "lessThan": "2e2a720766886190a6d35c116794693aabd332b6",
              "status": "affected",
              "version": "be102eb6a0e7c03db00e50540622f4e43b2d2844",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "8c2da7330214ce30f8333d1799a27ed0a9418f07",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/netfilter/nf_conncount.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "6.12.64",
              "status": "affected",
              "version": "6.12.63",
              "versionType": "semver"
            },
            {
              "lessThan": "6.18.3",
              "status": "affected",
              "version": "6.18.2",
              "versionType": "semver"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.64",
                  "versionStartIncluding": "6.12.63",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.3",
                  "versionStartIncluding": "6.18.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "6.17.13",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_conncount: fix leaked ct in error paths\n\nThere are some situations where ct might be leaked as error paths are\nskipping the refcounted check and return immediately. In order to solve\nit make sure that the check is always called."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-09T08:35:42.849Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/08fa37f4c8c59c294e9c18fea2d083ee94074e5a"
        },
        {
          "url": "https://git.kernel.org/stable/c/e1ac8dce3a893641bef224ad057932f142b8a36f"
        },
        {
          "url": "https://git.kernel.org/stable/c/f381a33f34dda9e4023e38ba68c943bca83245e9"
        },
        {
          "url": "https://git.kernel.org/stable/c/325eb61bb30790ea27782203a17b007ce1754a67"
        },
        {
          "url": "https://git.kernel.org/stable/c/0b88be7211d21a0d68bb1e56dc805944e3654d6f"
        },
        {
          "url": "https://git.kernel.org/stable/c/4bd2b89f4028f250dd1c1625eb3da1979b04a5e8"
        },
        {
          "url": "https://git.kernel.org/stable/c/2e2a720766886190a6d35c116794693aabd332b6"
        }
      ],
      "title": "netfilter: nf_conncount: fix leaked ct in error paths",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2025-71146",
    "datePublished": "2026-01-23T14:15:12.998Z",
    "dateReserved": "2026-01-13T15:30:19.661Z",
    "dateUpdated": "2026-02-09T08:35:42.849Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.