CVE-2024-44944 netfilter: ctnetlink: use helper function to calculate expect ID

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Updates on CVE-2024-44944 and CVE-2025-39764 in Netfilter CVE-2024-44944, published on August 30, 2024, addresses a vulnerability in netfilter's ctnetlink that involves a helper function for calculating expect IDs. CVE-2025-39764, published on September 11, 2025, pertains to the removal of refcounting in expectation dumpers within netfilter. Both vulnerabilities are relevant to users of the netfilter framework. 2 sources 41