Log in Start free

Vulnerability · Published Jan 23, 2026 · Assigned by Linux

CVE-2025-71146netfilter: nf_conncount: fix leaked ct in error paths

High 7.5

In plain English

A high-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 21% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.3%top 78.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: fix leaked ct in error paths There are some situations where ct might be leaked as error paths are skipping the refcounted check and return immediately. In order to solve it make sure that the check is always called.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:13linux6.12.69-1DEBIAN-CVE-2025-71146
Debian:14linux6.18.3-1DEBIAN-CVE-2025-71146
Ubuntu:25.10linux6.17.0-22.22UBUNTU-CVE-2025-71146
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2025-71146
Ubuntu:25.10linux-aws6.17.0-1012.12UBUNTU-CVE-2025-71146
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2025-71146
Ubuntu:24.04:LTSlinux-aws-6.176.17.0-1012.12~24.04.1UBUNTU-CVE-2025-71146
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2025-71146
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2025-71146
Ubuntu:25.10linux-azure6.17.0-1013.13UBUNTU-CVE-2025-71146
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2025-71146
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2025-71146
Ubuntu:24.04:LTSlinux-azure-6.176.17.0-1013.13~24.04.1UBUNTU-CVE-2025-71146
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2025-71146
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2025-71146
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2025-71146
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2025-71146
Ubuntu:25.10linux-gcp6.17.0-1012.12UBUNTU-CVE-2025-71146
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2025-71146
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2025-71146
Ubuntu:24.04:LTSlinux-gcp-6.176.17.0-1012.12~24.04.1UBUNTU-CVE-2025-71146
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2025-71146
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2025-71146
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2025-71146
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2025-71146
Ubuntu:24.04:LTSlinux-hwe-6.176.17.0-22.22~24.04.1UBUNTU-CVE-2025-71146
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2025-71146
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2025-71146
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2025-71146
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2025-71146
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2025-71146
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2025-71146
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2025-71146
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2025-71146
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2025-71146
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2025-71146
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2025-71146
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2025-71146
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2025-71146
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2025-71146
Ubuntu:24.04:LTSlinux-oem-6.176.17.0-1020.20UBUNTU-CVE-2025-71146
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2025-71146
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2025-71146
Ubuntu:25.10linux-oracle6.17.0-1011.11UBUNTU-CVE-2025-71146
Ubuntu:24.04:LTSlinux-oracle-6.14no fix listedUBUNTU-CVE-2025-71146
Ubuntu:24.04:LTSlinux-oracle-6.176.17.0-1011.11~24.04.1UBUNTU-CVE-2025-71146
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2025-71146
Ubuntu:25.10linux-raspi6.17.0-1013.13UBUNTU-CVE-2025-71146
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2025-71146
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-71146
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-71146
Ubuntu:25.10linux-realtime6.17.0-1010.11UBUNTU-CVE-2025-71146
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-71146
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-71146
Ubuntu:25.10linux-riscv6.17.0-22.22.1UBUNTU-CVE-2025-71146
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2025-71146
Ubuntu:24.04:LTSlinux-riscv-6.14no fix listedUBUNTU-CVE-2025-71146
Ubuntu:24.04:LTSlinux-riscv-6.176.17.0-22.22.1~24.04.1UBUNTU-CVE-2025-71146
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2025-71146
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2025-71146
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2025-71146
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2025-71146

Affected products (as reported)

VendorProductVersions
Linux Linux 6e86f0eca857ee42787e30e9ec0b726aebfcae0a – before 08fa37f4c8c59c294e9c18fea2d083ee94074e5ab160895d6bc9690459b16ef87799c9bd456af3ec – before e1ac8dce3a893641bef224ad057932f142b8a36f8d5a2c94c24dcc226863a7c2b5034750370c2189 – before f381a33f34dda9e4023e38ba68c943bca83245e9da9f247fb5efcd5a2730cdc989291b383c439e10 – before 325eb61bb30790ea27782203a17b007ce1754a673558faee8aace3541189c3a2ca45c7e85e144b44 – before 0b88be7211d21a0d68bb1e56dc805944e3654d6ff6904ed15ed1a188543057e3cb0d02daa80edfc9 – before 4bd2b89f4028f250dd1c1625eb3da1979b04a5e8be102eb6a0e7c03db00e50540622f4e43b2d2844 – before 2e2a720766886190a6d35c116794693aabd332b68c2da7330214ce30f8333d1799a27ed0a9418f07
Linux Linux 6.12.63 – before 6.12.646.18.2 – before 6.18.3

References