CVE-2025-71146 — Missing Release of Memory after Effective Lifetime in Linux
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 95.68%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJan 23
Latest updateApr 17
Description
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_conncount: fix leaked ct in error paths
There are some situations where ct might be leaked as error paths are
skipping the refcounted check and return immediately. In order to solve
it make sure that the check is always called.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6
Affected Packages7 packages
▶CVEListV5linux/linux6e86f0eca857ee42787e30e9ec0b726aebfcae0a — 08fa37f4c8c59c294e9c18fea2d083ee94074e5a+9
Patches
🔴Vulnerability Details
2OSV▶
CVE-2025-71146: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: fix leaked ct in error paths There are some situations wh↗2026-01-23
GHSA▶
GHSA-7v36-pgg4-9j5v: In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_conncount: fix leaked ct in error paths
There are some situations↗2026-01-23
📋Vendor Advisories
5Debian▶
CVE-2025-71146: linux - In the Linux kernel, the following vulnerability has been resolved: netfilter: ...↗2025