From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-alma10-1.taild15c8.ts.net [100.103.45.18]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 98EFE3783A0 for ; Sat, 15 Aug 2026 06:27:59 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=100.103.45.18 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1786775280; cv=none; b=NDduRQ9GTfvEpSZ3jGneqfeoLB/kDbKS5d86WFEbPQWkedfZKOxoLPGBpjO30CN2omVQFoVlLpijutdbyviL0wvRu1gdEst/q0IX4DusjEo91B6GUnezBu2DZ19hLbptomAmktuWPiSzd9+BGiX3z/6A56I2J9H2YTm/65h7phA= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1786775280; c=relaxed/simple; bh=Jvqsn2omhRJheeTtgVLHBARIaROB0AFjvP25Wr1xmTU=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version; b=gExZvIdUNRm4dxi1WyL4cFapFBKEv3WXEJ7f/RksqrfOloPSm9+KN8tg2YTQnFXLB0vUOb4sdoCF5Kq6vux1nl9fPVs6jJWG3/tNQz/WaYpeHE9GA7xuZy6ALfwxUqzFhd4H4myF/SYYZGohQYncsbEXF+19K73jG114DFHYojo= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b=XteudEf/; arc=none smtp.client-ip=100.103.45.18 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b="XteudEf/" Received: by smtp.kernel.org (Postfix) with ESMTPSA id EACD61F000E9; Sat, 15 Aug 2026 06:27:58 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linuxfoundation.org; s=korg; t=1786775279; bh=DIRqoJgu2JNYnPgJjuTXxnaf2rizJOb51iyRNCeR308=; h=From:To:Cc:Subject:Date:Reply-To; b=XteudEf/LBl1fvymx+rOWPwD2+hnlSliccENBsnrR/0zrlA8NbsdUQF3SZbH0ZyTl YNhjpGnBho+GOEz0bT5JAynMi7HD0BmRpcmYJc+JnrHi6VZrSBSXCHsfbOcpIdX1jJ r39q/YCh9l9jHKh4U/Phph2Rc35TXJmRQ2cx727w= From: Greg Kroah-Hartman To: linux-cve-announce@vger.kernel.org Cc: Greg Kroah-Hartman Subject: CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak Date: Sat, 15 Aug 2026 15:08:32 +0900 Message-ID: <2026081527-CVE-2026-72433-0b07@gregkh> X-Mailer: git-send-email 2.55.0 Reply-To: , Precedence: bulk X-Mailing-List: linux-cve-announce@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 X-Developer-Signature: v=1; a=openpgp-sha256; l=3193; i=gregkh@linuxfoundation.org; h=from:subject:message-id; bh=t4JUY5NDPa1nrWW/ZA1xBRZv1XlYaO0JdyFTpr+1L98=; b=owGbwMvMwCRo6H6F97bub03G02pJDFkNDF++fdE9XLhU/+9vp+cLUuevYAvv0Z2Quu7zq78us sf28Wxu6IhlYRBkYpAVU2T5so3n6P6KQ4pehranYeawMoEMYeDiFICJRH1kmKctzaO5ZZ7hgdkp O5dn9j8NnyVw3oNhvuONOonnhc3qwZ8uXAq2WS+UNNfzNQA= X-Developer-Key: i=gregkh@linuxfoundation.org; a=openpgp; fpr=F4B60CC5BF78C2214A313DCB3147D40DDB2DFB29 Content-Transfer-Encoding: 8bit From: Greg Kroah-Hartman Description =========== In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak This needs to test for nonzero retval. The Linux kernel CVE team has assigned CVE-2026-72433 to this issue. Affected and fixed versions =========================== Issue introduced in 5.3 with commit c54c7c685494fc0f1662091d4d0c4fc26e810471 and fixed in 5.10.261 with commit c37a39b963034cc2d141baf46017614cb1fc275f Issue introduced in 5.3 with commit c54c7c685494fc0f1662091d4d0c4fc26e810471 and fixed in 5.15.212 with commit a853c3769b73ceb2d2b735aff621d1d51fe0553d Issue introduced in 5.3 with commit c54c7c685494fc0f1662091d4d0c4fc26e810471 and fixed in 6.1.178 with commit b1b0b9efe641afa5c2d4ba2ec77aed7b6f4bc398 Issue introduced in 5.3 with commit c54c7c685494fc0f1662091d4d0c4fc26e810471 and fixed in 6.6.145 with commit f73b7de5338fcca7f63ca88597a050c119501531 Issue introduced in 5.3 with commit c54c7c685494fc0f1662091d4d0c4fc26e810471 and fixed in 6.12.97 with commit 92c9682b36f0c8f7a1f14d4558b72793f62e90a1 Issue introduced in 5.3 with commit c54c7c685494fc0f1662091d4d0c4fc26e810471 and fixed in 6.18.40 with commit 7e23965d44f06ed93fb5362fb1e321b769eecc3b Issue introduced in 5.3 with commit c54c7c685494fc0f1662091d4d0c4fc26e810471 and fixed in 7.1.5 with commit 4dce8bf588a89bef99b446136d15685a837e7acf Issue introduced in 5.3 with commit c54c7c685494fc0f1662091d4d0c4fc26e810471 and fixed in 7.2-rc1 with commit 27dd2997746d54ebc079bb13161cc1bdd401d4a6 Please see https://www.kernel.org for a full list of currently supported kernel versions by the kernel community. Unaffected versions might change over time as fixes are backported to older supported kernel versions. The official CVE entry at https://cve.org/CVERecord/?id=CVE-2026-72433 will be updated if fixes are backported, please check that for the most up to date information about this issue. Affected files ============== The file(s) affected by this issue are: net/bridge/netfilter/nft_meta_bridge.c Mitigation ========== The Linux kernel CVE team recommends that you update to the latest stable kernel version for this, and many other bugfixes. Individual changes are never tested alone, but rather are part of a larger kernel release. Cherry-picking individual commits is not recommended or supported by the Linux kernel community at all. If however, updating to the latest release is impossible, the individual changes to resolve this issue can be found at these commits: https://git.kernel.org/stable/c/c37a39b963034cc2d141baf46017614cb1fc275f https://git.kernel.org/stable/c/a853c3769b73ceb2d2b735aff621d1d51fe0553d https://git.kernel.org/stable/c/b1b0b9efe641afa5c2d4ba2ec77aed7b6f4bc398 https://git.kernel.org/stable/c/f73b7de5338fcca7f63ca88597a050c119501531 https://git.kernel.org/stable/c/92c9682b36f0c8f7a1f14d4558b72793f62e90a1 https://git.kernel.org/stable/c/7e23965d44f06ed93fb5362fb1e321b769eecc3b https://git.kernel.org/stable/c/4dce8bf588a89bef99b446136d15685a837e7acf https://git.kernel.org/stable/c/27dd2997746d54ebc079bb13161cc1bdd401d4a6