https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 18:40:21 +0000 https://db.gcve.eu/vuln/cve-2026-98322 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>netfilter: nft_nat: fully initialise new_addr in netmap setup</p> <p>nft_nat_setup_netmap() builds the mapped address in an on-stack union nf_inet_addr. For an IPv4 mapping it writes only the 4-byte .ip member and the loop runs a single 32-bit iteration, but it then copies the whole 16-byte union into range-&gt;min_addr and range-&gt;max_addr, so the upper 12 bytes reach nf_nat_setup_info() uninitialised.</p> <p>KMSAN reports an uninit-value in nf_nat_setup_info() reached from nft_nat_eval(). The IPv6 path fills all 16 bytes and is not affected.</p> <p>Zero-initialise new_addr.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>netfilter: nft_nat: fully initialise new_addr in netmap setup</p> <p>nft_nat_setup_netmap() builds the mapped address in an on-stack union nf_inet_addr. For an IPv4 mapping it writes only the 4-byte .ip member and the loop runs a single 32-bit iteration, but it then copies the whole 16-byte union into range-&gt;min_addr and range-&gt;max_addr, so the upper 12 bytes reach nf_nat_setup_info() uninitialised.</p> <p>KMSAN reports an uninit-value in nf_nat_setup_info() reached from nft_nat_eval(). The IPv6 path fills all 16 bytes and is not affected.</p> <p>Zero-initialise new_addr.</p> https://db.gcve.eu/vuln/cve-2026-98322