Answer in brief
CVE-2026-98793 records a Unknown severity vulnerability in netfilter: bpf: reject invalid NAT manipulation types. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=0fabd2aa199faeb8754aee94658f2c48ccb2c8c3 <ea777dc90ab37e64fa4b92f6fcf3b5edcef5e058 || >=0fabd2aa199faeb8754aee94658f2c48ccb2c8c3 <f6143ae109df56d51d5536e813deb19eee7a6205 || >=0fabd2aa199faeb8754aee94658f2c48ccb2c8c3 <58108f05b0502448f6bb612ee2eccc63bd6449cb || >=0fabd2aa199faeb8754aee94658f2c48ccb2c8c3 <16d464013ec2267b00a83f4bfbb97b3ecc63bfa7 | ea777dc90ab37e64fa4b92f6fcf3b5edcef5e058, f6143ae109df56d51d5536e813deb19eee7a6205, 58108f05b0502448f6bb612ee2eccc63bd6449cb, 16d464013ec2267b00a83f4bfbb97b3ecc63bfa7 |
| Linux/Linuxgeneric | 6.1 | Not reported |
| Linux/Linuxgeneric | >=0fabd2aa199faeb8754aee94658f2c48ccb2c8c3 <752492947be3123ea6c689e2f93ae04ecd675d42 || >=0fabd2aa199faeb8754aee94658f2c48ccb2c8c3 <ea777dc90ab37e64fa4b92f6fcf3b5edcef5e058 || >=0fabd2aa199faeb8754aee94658f2c48ccb2c8c3 <f6143ae109df56d51d5536e813deb19eee7a6205 || >=0fabd2aa199faeb8754aee94658f2c48ccb2c8c3 <58108f05b0502448f6bb612ee2eccc63bd6449cb || >=0fabd2aa199faeb8754aee94658f2c48ccb2c8c3 <16d464013ec2267b00a83f4bfbb97b3ecc63bfa7 | 752492947be3123ea6c689e2f93ae04ecd675d42, ea777dc90ab37e64fa4b92f6fcf3b5edcef5e058, f6143ae109df56d51d5536e813deb19eee7a6205, 58108f05b0502448f6bb612ee2eccc63bd6449cb, 16d464013ec2267b00a83f4bfbb97b3ecc63bfa7 |
Published upstream
Oct 18, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 21, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Oct 18, 2026
In the Linux kernel, the following vulnerability has been resolved: netfilter: bpf: reject invalid NAT manipulation types As bpf_ct_set_nat_info() is not validating the NAT manipulation type a wrong value can be passed directly to nf_nat_setup_info(). This triggers the WARN_ON() at nf_nat_setup_info() and if panic_on_warn isn't set, then IPS_SRC_NAT_DONE is set without adding nat_bysource and conntrack cleanup tries to unlink an uninitialized hlist node. Fix this by checking that NAT manipulation type is correct before calling nf_nat_setup_info(). In addition, if the WARN_ON is hit, return NF_DROP instead of continuing with the processing to avoid similar situations in the future.
Quoted source text, attributed separately from HOL analysis.