In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_expect: zero at allocation time There are occasional LLM hints wrt. leaking uninitialized data to userspace via ctnetlink. Just zero at allocation time, expectations are not frequently used these days. Intentionally keeps _init as-is because we could theoretically support re-init, so add the missing exp->dir there.
Fix
Microsoft's update · Moderate
- Release Notes — azl3 kernel 6.6.157.1-1 on Azure Linux 3.0 · build 6.6.159.1-1
From the 2026-Oct release note of Microsoft's Security Update Guide, revised 2026-11-01.
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 5
- StatusReceived → PublishedNVD modified 2026-10-26 06:55
- StatusPublished → ReceivedNVD modified 2026-10-26 07:17
- StatusReceived → PublishedNVD modified 2026-10-23 11:37
- StatusPublished → ReceivedNVD modified 2026-10-23 12:18
- First seenunscored · linuxNVD modified 2026-10-23 11:37
Affected (CPE criteria) 0
NVD has not attached CPE configurations yet.
References 7
- https://git.kernel.org/stable/c/241ccd2fed9051db443aadce248fc0ab30f55e97
- https://git.kernel.org/stable/c/39cb6ff947c16a576ea68c5f272e634acdcb0085
- https://git.kernel.org/stable/c/824397af7bfe14edad374c64253dae0187ca623d
- https://git.kernel.org/stable/c/90545aa07a183887e9d72ce573c18e08f62e2c91
- https://git.kernel.org/stable/c/9c11d7ea5ff4dbe162e79f00188814ef5483c295
- https://git.kernel.org/stable/c/a39ecb856514274c80d0fac4d128dba6b266a8ed
- https://git.kernel.org/stable/c/b7f3ee925aee9f1f547d539bc03c35433c238958