Answer in brief
CVE-2026-52970 records a Unknown severity vulnerability in netfilter: nft_ct: fix missing expect put in obj eval. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (generic), Siemens/SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (generic) and additional mapped packages. Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (generic), Siemens/SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (generic) and additional mapped packages. Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=857b46027d6f91150797295752581b7155b9d0e1 <cdb9a25dd3416d427e8b2753210f8baf44207577 || >=857b46027d6f91150797295752581b7155b9d0e1 <26ab32ec73941871c97562ee1f39587950dc3b68 || >=857b46027d6f91150797295752581b7155b9d0e1 <7b96242ceedfe249f158419f3254bcee04173ffe || >=857b46027d6f91150797295752581b7155b9d0e1 <ecca618e1e339494911090474ed87742c0f73976 || >=857b46027d6f91150797295752581b7155b9d0e1 <2aef1b13d5c0285f340512c6c07eb858fd018fd8 || >=857b46027d6f91150797295752581b7155b9d0e1 <1dced0725e2fae3ac3416274db20a7ff5a46931d || >=857b46027d6f91150797295752581b7155b9d0e1 <84c422cea5a45fe56be839f25880f21fd33940cd || >=857b46027d6f91150797295752581b7155b9d0e1 <19f94b6fee75b3ef7fbc06f3745b9a771a8a19a4 | cdb9a25dd3416d427e8b2753210f8baf44207577, 26ab32ec73941871c97562ee1f39587950dc3b68, 7b96242ceedfe249f158419f3254bcee04173ffe, ecca618e1e339494911090474ed87742c0f73976, 2aef1b13d5c0285f340512c6c07eb858fd018fd8, 1dced0725e2fae3ac3416274db20a7ff5a46931d, 84c422cea5a45fe56be839f25880f21fd33940cd, 19f94b6fee75b3ef7fbc06f3745b9a771a8a19a4 |
| Linux/Linuxgeneric | 5.3 | Not reported |
| Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFPgeneric | >=V3.1.6 <* | * |
| Siemens/SIMATIC S7-1500 CPU 1518F-4 PN/DP MFPgeneric | >=V3.1.6 <* | * |
| Siemens/SIPLUS S7-1500 CPU 1518-4 PN/DP MFPgeneric | >=V3.1.6 <* | * |
Published upstream
Jun 24, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Sep 8, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Jun 24, 2026
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_ct: fix missing expect put in obj eval nft_ct_expect_obj_eval() allocates an expectation and may call nf_ct_expect_related(), but never drops its local reference. Add nf_ct_expect_put(exp) before return to balance allocation.
Quoted source text, attributed separately from HOL analysis.