CVE-2025-39764 netfilter: ctnetlink: remove refcounting in expectation dumpers

Api.Msrc.Microsoft • February 18, 2026

Share: View original

Information published.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Updates on CVE-2024-44944 and CVE-2025-39764 in Netfilter CVE-2024-44944, published on August 30, 2024, addresses a vulnerability in netfilter's ctnetlink that involves a helper function for calculating expect IDs. CVE-2025-39764, published on September 11, 2025, pertains to the removal of refcounting in expectation dumpers within netfilter. Both vulnerabilities are relevant to users of the netfilter framework. 2 sources 41

Extracted Entities

CVEs (1)

Platforms (2)

Ctnetlink Netfilter