CVE-2026-43450

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() nfnl_cthelper_dump_table() has a 'goto restart' that jumps to a label inside the for loop body. When the "last" helper saved in cb->args[1] is deleted between dump rounds, every entry fails the (cur != last) check, so cb->args[1] is never cleared. The for loop finishes with cb->args[0] == nf_ct_helper_hsize, and the 'goto restart' jumps back into the loop body bypassing the bounds check, causing an 8-byte out-of-bounds read on nf_ct_helper_hash[nf_ct_helper_hsize]. The 'goto restart' block was meant to re-traverse the current bucket when "last" is no longer found, but it was placed after the for loop instead of inside it. Move the block into the for loop body so that the restart only occurs while cb->args[0] is still within bounds. BUG: KASAN: slab-out-of-bounds in nfnl_cthelper_dump_table+0x9f/0x1b0 Read of size 8 at addr ffff888104ca3000 by task poc_cthelper/131 Call Trace: nfnl_cthelper_dump_table+0x9f/0x1b0 netlink_dump+0x333/0x880 netlink_recvmsg+0x3e2/0x4b0 sock_recvmsg+0xde/0xf0 __sys_recvfrom+0x150/0x200 __x64_sys_recvfrom+0x76/0x90 do_syscall_64+0xc3/0x6e0 Allocated by task 1: __kvmalloc_node_noprof+0x21b/0x700 nf_ct_alloc_hashtable+0x65/0xd0 nf_conntrack_helper_init+0x21/0x60 nf_conntrack_init_start+0x18d/0x300 nf_conntrack_standalone_init+0x12/0xc0

Overview

State: PUBLISHED
Assigner (CNA): Linux
CVSS severity: high
CVSS score: 7.1 / 10
CVSS vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Effective score: 7.1 / 10 HIGH source: CNA overview
CWE(s): —
Reserved: 2026-05-01
Published: 2026-05-08 16:22 UTC
Last updated: 2026-05-12 00:24 UTC
Source: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/43xxx/CVE-2026-43450.json
Linked Threat: CVE-2026-43450 — CVE-2026-43450

NVD triage scoring NVD CVE 2.0

Layer NVD adds on top of the CNA's CVE record — published / last-modified timestamps, exploitability / impact subscores, and the FIRST.org EPSS probability that this CVE will be exploited in the wild in the next 30 days.

NVD published: 2026-05-08 15:16:57 UTC
NVD last modified: 2026-05-21 16:57:23 UTC
NVD CVSS v3.1: 7.1 / 10 HIGH source: nvd@nist.gov
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Exploitability subscore: 1.8 / 10
Impact subscore: 5.2 / 10
EPSS score: 0.0001 (probability of exploitation in next 30 days)
EPSS percentile: 2.55% vs all CVEs — higher = more likely to be exploited, as of 2026-05-24

NVD-assigned CWE(s): CWE-125 (differs from the CNA list above)

European Union Vulnerability Database ENISA EUVD

ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.

EUVD ID: EUVD-2026-28756
Assigner: Linux
Published: May 8, 2026, 2:22:15 PM
Updated: May 11, 2026, 10:24:49 PM
EUVD base score: 0.0 / 10
EUVD-reported EPSS: 0.0100
Vendors: Linux
Products: Linux (12f7a505331e6b2754684b509f2ac8f0011ce644 <6dcee8496d53165b2d8a5909b3050b62ae71fe89)

Linux (patch: 6.6.130)

Linux (patch: 6.18.19)

Linux (12f7a505331e6b2754684b509f2ac8f0011ce644 <3cc328ffc32ddb389cba7b78b6aa95d995c2876e)

Linux (3.6)

Linux (patch: 6.19.9)

Linux (12f7a505331e6b2754684b509f2ac8f0011ce644 <4a1f6ee69267a5f524102c028981410eeacfa3da)

Linux (patch: 6.1.167)

Linux (12f7a505331e6b2754684b509f2ac8f0011ce644 <05018cd9370f77bb18fbf6e15ff33c7a06f10b3c)

Linux (12f7a505331e6b2754684b509f2ac8f0011ce644 <61b3a1f8621df1a5928118313f133996f6a786db)

Linux (patch: 7.0)

Linux (12f7a505331e6b2754684b509f2ac8f0011ce644 <894c5780ddadd5fde0e16f66587918e6be1504c4)

Linux (patch: 0)

Linux (12f7a505331e6b2754684b509f2ac8f0011ce644 <92441f6d9405a0c18d03f278b395e782f79a4a30)

Linux (patch: 6.12.78)

Linux (12f7a505331e6b2754684b509f2ac8f0011ce644 <0605e1985a95d4334a67869aee45a47e82301abf)

Linux (patch: 5.10.253)

Linux (patch: 5.15.203)

ENISA description: In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() nfnl_cthelper_dump_table() has a 'goto restart' that jumps to a label inside the for loop body. When the "last" helper saved in cb->args[1] is deleted between dump rounds, every entry fails the (cur != last) check, so cb->args[1] is never cleared. The for loop finishes with cb->args[0] == nf_ct_helper_hsize, and the 'goto restart' jumps back into the loop body bypassing the bounds check, causing an 8-byte out-of-bounds read on nf_ct_helper_hash[nf_ct_helper_hsize]. The 'goto restart' block was meant to re-traverse the current bucket when "last" is no longer found, but it was placed after the for loop instead of inside it. Move the block into the for loop body so that the restart only occurs while cb->args[0] is still within bounds. BUG: KASAN: slab-out-of-bounds in nfnl_cthelper_dump_table+0x9f/0x1b0 Read of size 8 at addr ffff888104ca3000 by task poc_cthelper/131 Call Trace: nfnl_cthelper_dump_table+0x9f/0x1b0 netlink_dump+0x333/0x880 netlink_recvmsg+0x3e2/0x4b0 sock_recvmsg+0xde/0xf0 __sys_recvfrom+0x150/0x200 __x64_sys_recvfrom+0x76/0x90 do_syscall_64+0xc3/0x6e0 Allocated by task 1: __kvmalloc_node_noprof+0x21b/0x700 nf_ct_alloc_hashtable+0x65/0xd0 nf_conntrack_helper_init+0x21/0x60 nf_conntrack_init_start+0x18d/0x300 nf_conntrack_standalone_init+0x12/0xc0

EUVD references (8)

Affected products (2)

Vendor	Product	Versions	Platforms
Linux	Linux	`12f7a505331e6b2754684b509f2ac8f0011ce644` (affected), `12f7a505331e6b2754684b509f2ac8f0011ce644` (affected), `12f7a505331e6b2754684b509f2ac8f0011ce644` (affected), `12f7a505331e6b2754684b509f2ac8f0011ce644` (affected), `12f7a505331e6b2754684b509f2ac8f0011ce644` (affected), `12f7a505331e6b2754684b509f2ac8f0011ce644` (affected), `12f7a505331e6b2754684b509f2ac8f0011ce644` (affected), `12f7a505331e6b2754684b509f2ac8f0011ce644` (affected)	—
Linux	Linux	`3.6` (affected), `0` (unaffected), `5.10.253` (unaffected), `5.15.203` (unaffected), `6.1.167` (unaffected), `6.6.130` (unaffected), `6.12.78` (unaffected), `6.18.19` (unaffected), `6.19.9` (unaffected), `7.0` (unaffected)	—

Affected products — CPE 2.3 (4) NVD

NVD's normalized CPE 2.3 matchers, used by vendor tools (vulnerability scanners, asset managers) for automated detection. Compare with the CNA's free-text "Affected products" section above.

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*

Vendor references (8)

References embedded in the original CVE record by the assigning CNA.

MITRE references (8) cveawg.mitre.org

Pulled from MITRE's CVE Services API by the 🛰 Backfill from MITRE button.

Web references (6)

DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.

http://cwe.mitre.org/data/definitions/125.html rapid7:cwe.mitre.org
https://attackerkb.com/topics/CVE-2026-43450 rapid7:attackerkb.com
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-28756 rapid7:euvd.enisa.europa.eu
https://www.first.org/epss/ tenable:www.first.org
https://nvd.nist.gov/vuln/detail/CVE-2026-43450 tenable:nvd.nist.gov
https://www.cve.org/CVERecord?id=CVE-2026-43450 tenable:www.cve.org

NVD-tagged references (8)

Reference list NVD curates from the CNA record, vendor advisories, and third-party reports. The tag chips below are NVD's analyst-assigned categories.

https://git.kernel.org/stable/c/05018cd9370f77bb18fbf6e15ff33c7a06f10b3c 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Patch
https://git.kernel.org/stable/c/0605e1985a95d4334a67869aee45a47e82301abf 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Patch
https://git.kernel.org/stable/c/3cc328ffc32ddb389cba7b78b6aa95d995c2876e 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Patch
https://git.kernel.org/stable/c/4a1f6ee69267a5f524102c028981410eeacfa3da 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Patch
https://git.kernel.org/stable/c/61b3a1f8621df1a5928118313f133996f6a786db 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Patch
https://git.kernel.org/stable/c/6dcee8496d53165b2d8a5909b3050b62ae71fe89 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Patch
https://git.kernel.org/stable/c/894c5780ddadd5fde0e16f66587918e6be1504c4 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Patch
https://git.kernel.org/stable/c/92441f6d9405a0c18d03f278b395e782f79a4a30 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Patch

Remediations (16)

Remediations are stored against the linked Threat row; the list below is deduplicated across both pages.

RHSB-2026-003 Networking subsystem Privilege Escalation - Linux Kernel ...

web:access.redhat.com

The mitigation methods below address both vulnerabilities that affect Red Hat products — CVE - 2026 -43284 (IPsec ESP) and CVE - 2026 -46300 (XFRM ESP-in-TCP). CVE - 2026 -43500 (rxrpc) does not affect Red Hat products and requires no mitigation .

2026-05-23 21:04 UTC
CISA Warns of Exploited Microsoft Defender 0-Day Flaws

web:cyberpress.org

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two actively exploited Microsoft Defender vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, issuing an urgent remediation directive for federal agencies with a due date of June 3, 2026 .

2026-05-23 21:04 UTC
Patch Tuesday, May 2026 Edition - Krebs on Security

web:krebsonsecurity.com

Microsoft expects that exploitation is more likely. May's Patch Tuesday is a welcome respite from April, which saw Microsoft fix a near-record 167 security flaws.

2026-05-23 21:04 UTC
Nvd - Cve-2026-34500

web:nvd.nist.gov

Official websites use .gov A .gov website belongs to an official government organization in the United States.

2026-05-23 21:04 UTC
Security Update Guide - Microsoft

web:portal.msrc.microsoft.com

The Security Update Guide provides information on the latest Microsoft security updates, helping users understand and address potential vulnerabilities effectively.

2026-05-23 21:04 UTC
CVE-2026-43500 and CVE-2026-43284 analysis

web:socprime.com

Explore Detections CVE - 2026 -43500 and CVE - 2026 -43284 Mitigation Practical CVE - 2026 -43500 mitigation starts with reducing available attack paths before a vendor patch is fully available across environments.

2026-05-23 21:04 UTC
Oracle Critical Patch Update Advisory - April 2026

web:www.oracle.com

This Critical Patch Update contains 481 new security patches across the product families listed below. Please note that an MOS note summarizing the content of this Critical Patch Update and other Oracle Software Security Assurance activities is located at April 2026 Critical Patch Update: Executive Summary and Analysis.

2026-05-23 21:04 UTC
VirusTotal - Home

web:www.virustotal.com

VirusTotal is a platform for scanning files and URLs for viruses, malware, and other threats using multiple antivirus engines.

2026-05-23 21:04 UTC
Windows 11 April 2026 Update tested: What's new, improved and fixed

web:www.windowslatest.com

Windows 11 April 2026 update adds Narrator Copilot support, faster Settings, File Explorer fixes, and key security improvements.

2026-05-23 21:04 UTC
Patch Tuesday May 2026: Security Updates & CVE Analysis

web:zecurit.com

Get the complete breakdown of Microsoft's May 2026 Patch Tuesday. We analyze the latest security updates and all critical CVEs .

2026-05-23 21:04 UTC
Security Advisory Bulletin 064 | Ubiquiti Community

web:community.ui.com

Published: May 21, 2026 Updated: May 22, 2026 Version: 1.1 Revision: 1.1 Summary 1 of 5 A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection. Affected Products: UniFi OS Server (Version 5.0.6 and earlier) Mitigation : Update your UniFi OS Server to Version 5.0.8 or later ...

2026-05-26 02:49 UTC
Patch Tuesday, April 2026 Edition - Krebs on Security

web:krebsonsecurity.com

For a clickable, per- patch breakdown, check out the SANS Internet Storm Center Patch Tuesday roundup. Running into problems applying any of these updates?

2026-05-26 02:49 UTC
Security Update Guide - Microsoft

web:msrc.microsoft.com

The Microsoft Security Response Center (MSRC) investigates all reports of security vulnerabilities affecting Microsoft products and services, and provides the information here as part of the ongoing effort to help you manage security risks and help keep your systems protected.

2026-05-26 02:49 UTC
NVD - Vulnerabilities

web:nvd.nist.gov

Vulnerabilities All vulnerabilities in the NVD have been assigned a CVE identifier and thus, abide by the definition below. CVE defines a vulnerability as: "A weakness in the computational logic (e.g., code) found in software and hardware components that, when exploited, results in a negative impact to confidentiality, integrity, or availability. Mitigation of the vulnerabilities in this ...

2026-05-26 02:49 UTC
Landing Page | ServiceNow Common Vulnerabilities & Exposures (CVE ...

web:support.servicenow.com

Overview The advisories below document publicly disclosed Common Vulnerabilities and Exposures ( CVEs ) in the Now Platform by ServiceNow. Because ServiceNow uses various methods to communicate vulnerability information, patches, and other fixes, customers should review family, security patch , and hotfix release notes, which are available at https://docs.servicenow.com, for a complete list of ...

2026-05-26 02:49 UTC
CVE: Common Vulnerabilities and Exposures

web:www.cve.org

At cve .org, we provide the authoritative reference method for publicly known information-security vulnerabilities and exposures

2026-05-26 02:49 UTC

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.

Raw JSON

The full cvelistV5 record. Download as CVE-2026-43450.json.

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/netfilter/nfnetlink_cthelper.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "0605e1985a95d4334a67869aee45a47e82301abf",
              "status": "affected",
              "version": "12f7a505331e6b2754684b509f2ac8f0011ce644",
              "versionType": "git"
            },
            {
              "lessThan": "92441f6d9405a0c18d03f278b395e782f79a4a30",
              "status": "affected",
              "version": "12f7a505331e6b2754684b509f2ac8f0011ce644",
              "versionType": "git"
            },
            {
              "lessThan": "3cc328ffc32ddb389cba7b78b6aa95d995c2876e",
              "status": "affected",
              "version": "12f7a505331e6b2754684b509f2ac8f0011ce644",
              "versionType": "git"
            },
            {
              "lessThan": "4a1f6ee69267a5f524102c028981410eeacfa3da",
              "status": "affected",
              "version": "12f7a505331e6b2754684b509f2ac8f0011ce644",
              "versionType": "git"
            },
            {
              "lessThan": "894c5780ddadd5fde0e16f66587918e6be1504c4",
              "status": "affected",
              "version": "12f7a505331e6b2754684b509f2ac8f0011ce644",
              "versionType": "git"
            },
            {
              "lessThan": "05018cd9370f77bb18fbf6e15ff33c7a06f10b3c",
              "status": "affected",
              "version": "12f7a505331e6b2754684b509f2ac8f0011ce644",
              "versionType": "git"
            },
            {
              "lessThan": "61b3a1f8621df1a5928118313f133996f6a786db",
              "status": "affected",
              "version": "12f7a505331e6b2754684b509f2ac8f0011ce644",
              "versionType": "git"
            },
            {
              "lessThan": "6dcee8496d53165b2d8a5909b3050b62ae71fe89",
              "status": "affected",
              "version": "12f7a505331e6b2754684b509f2ac8f0011ce644",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/netfilter/nfnetlink_cthelper.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "3.6"
            },
            {
              "lessThan": "3.6",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.253",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.203",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.167",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.130",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.78",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.19",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.19.*",
              "status": "unaffected",
              "version": "6.19.9",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.0",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.253",
                  "versionStartIncluding": "3.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.203",
                  "versionStartIncluding": "3.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.167",
                  "versionStartIncluding": "3.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.130",
                  "versionStartIncluding": "3.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.78",
                  "versionStartIncluding": "3.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.19",
                  "versionStartIncluding": "3.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.19.9",
                  "versionStartIncluding": "3.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0",
                  "versionStartIncluding": "3.6",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()\n\nnfnl_cthelper_dump_table() has a 'goto restart' that jumps to a label\ninside the for loop body.  When the \"last\" helper saved in cb->args[1]\nis deleted between dump rounds, every entry fails the (cur != last)\ncheck, so cb->args[1] is never cleared.  The for loop finishes with\ncb->args[0] == nf_ct_helper_hsize, and the 'goto restart' jumps back\ninto the loop body bypassing the bounds check, causing an 8-byte\nout-of-bounds read on nf_ct_helper_hash[nf_ct_helper_hsize].\n\nThe 'goto restart' block was meant to re-traverse the current bucket\nwhen \"last\" is no longer found, but it was placed after the for loop\ninstead of inside it.  Move the block into the for loop body so that\nthe restart only occurs while cb->args[0] is still within bounds.\n\n BUG: KASAN: slab-out-of-bounds in nfnl_cthelper_dump_table+0x9f/0x1b0\n Read of size 8 at addr ffff888104ca3000 by task poc_cthelper/131\n Call Trace:\n  nfnl_cthelper_dump_table+0x9f/0x1b0\n  netlink_dump+0x333/0x880\n  netlink_recvmsg+0x3e2/0x4b0\n  sock_recvmsg+0xde/0xf0\n  __sys_recvfrom+0x150/0x200\n  __x64_sys_recvfrom+0x76/0x90\n  do_syscall_64+0xc3/0x6e0\n\n Allocated by task 1:\n  __kvmalloc_node_noprof+0x21b/0x700\n  nf_ct_alloc_hashtable+0x65/0xd0\n  nf_conntrack_helper_init+0x21/0x60\n  nf_conntrack_init_start+0x18d/0x300\n  nf_conntrack_standalone_init+0x12/0xc0"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T22:24:49.527Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/0605e1985a95d4334a67869aee45a47e82301abf"
        },
        {
          "url": "https://git.kernel.org/stable/c/92441f6d9405a0c18d03f278b395e782f79a4a30"
        },
        {
          "url": "https://git.kernel.org/stable/c/3cc328ffc32ddb389cba7b78b6aa95d995c2876e"
        },
        {
          "url": "https://git.kernel.org/stable/c/4a1f6ee69267a5f524102c028981410eeacfa3da"
        },
        {
          "url": "https://git.kernel.org/stable/c/894c5780ddadd5fde0e16f66587918e6be1504c4"
        },
        {
          "url": "https://git.kernel.org/stable/c/05018cd9370f77bb18fbf6e15ff33c7a06f10b3c"
        },
        {
          "url": "https://git.kernel.org/stable/c/61b3a1f8621df1a5928118313f133996f6a786db"
        },
        {
          "url": "https://git.kernel.org/stable/c/6dcee8496d53165b2d8a5909b3050b62ae71fe89"
        }
      ],
      "title": "netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-43450",
    "datePublished": "2026-05-08T14:22:15.915Z",
    "dateReserved": "2026-05-01T14:12:56.010Z",
    "dateUpdated": "2026-05-11T22:24:49.527Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}