01 Record

CVE-2026-43451

netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.12% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 2.4% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Analyzed. NVD last modified this record on 2026-06-17.
Red Hat severity: Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-05-08 14:22Z3 MO AGO

Last updated

2026-05-11 22:24Z3 MO AGO

Reserved

2026-05-01

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-401Missing Release of Memory after Effective LifetimeVariant
CWE-772Missing Release of Resource after Effective LifetimeBase

Data version

5.2

Document digest

618df4bbe17718f487996ece50b2d28596d0d42e36492ea34b8ebe1046ac34d4

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux8d45ff22f1b43249f0cf1baafe0262ca10d1666e to < a907bea273b60d3e604ec4e8e1f6c49954805794, 8d45ff22f1b43249f0cf1baafe0262ca10d1666e to < 0b18d1b834ab5a5009be70b530f978d7989e445b, 8d45ff22f1b43249f0cf1baafe0262ca10d1666e to < b38d2b4603fd3dda24eb8b3dd81c18a0930be97b, 8d45ff22f1b43249f0cf1baafe0262ca10d1666e to < 47b1c5d1b0944aa88299f55a846fabaefc756982, 8d45ff22f1b43249f0cf1baafe0262ca10d1666e to < cf4a4df38d1747e06fc54f9879bd7a6f4178032f, 8d45ff22f1b43249f0cf1baafe0262ca10d1666e to < 9853d94b82d303fc4ac37d592a23a154096ecd41, 8d45ff22f1b43249f0cf1baafe0262ca10d1666e to < 208669df703a25a601f45822b10c413f258bf275, 8d45ff22f1b43249f0cf1baafe0262ca10d1666e to < f1ba83755d81c6fc66ac7acd723d238f974091e9, 4.7—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/a907bea273b60d3e604ec4e8e1f6c49954805794
git.kernel.orghttps://git.kernel.org/stable/c/0b18d1b834ab5a5009be70b530f978d7989e445b
git.kernel.orghttps://git.kernel.org/stable/c/b38d2b4603fd3dda24eb8b3dd81c18a0930be97b
git.kernel.orghttps://git.kernel.org/stable/c/47b1c5d1b0944aa88299f55a846fabaefc756982
git.kernel.orghttps://git.kernel.org/stable/c/cf4a4df38d1747e06fc54f9879bd7a6f4178032f
git.kernel.orghttps://git.kernel.org/stable/c/9853d94b82d303fc4ac37d592a23a154096ecd41
git.kernel.orghttps://git.kernel.org/stable/c/208669df703a25a601f45822b10c413f258bf275
git.kernel.orghttps://git.kernel.org/stable/c/f1ba83755d81c6fc66ac7acd723d238f974091e9

01 Record index

CVE-2026-43451

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2026-43451

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References