[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-43450":6},{"stargazers_count":4,"fetched_at":5},7,"2026-07-30T21:17:53.703Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":23,"aliases":24,"duplicate_of":9,"upstream":25,"downstream":26,"duplicates":45,"related":46,"reserved_at":9,"published_at":48,"modified_at":49,"state":50,"summary":51,"references_raw":60,"kevs":95,"epss":96,"epss_history":99,"metrics":271,"affected":277},"CVE-2026-43450","In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()\n\nnfnl_cthelper_dump_table() has a 'goto restart' that jumps to a label\ninside the for loop body.  When the \"last\" helper saved in cb->args[1]\nis deleted between dump rounds, every entry fails the (cur != last)\ncheck, so cb->args[1] is never cleared.  The for loop finishes with\ncb->args[0] == nf_ct_helper_hsize, and the 'goto restart' jumps back\ninto the loop body bypassing the bounds check, causing an 8-byte\nout-of-bounds read on nf_ct_helper_hash[nf_ct_helper_hsize].\n\nThe 'goto restart' block was meant to re-traverse the current bucket\nwhen \"last\" is no longer found, but it was placed after the for loop\ninstead of inside it.  Move the block into the for loop body so that\nthe restart only occurs while cb->args[0] is still within bounds.\n\n BUG: KASAN: slab-out-of-bounds in nfnl_cthelper_dump_table+0x9f/0x1b0\n Read of size 8 at addr ffff888104ca3000 by task poc_cthelper/131\n Call Trace:\n  nfnl_cthelper_dump_table+0x9f/0x1b0\n  netlink_dump+0x333/0x880\n  netlink_recvmsg+0x3e2/0x4b0\n  sock_recvmsg+0xde/0xf0\n  __sys_recvfrom+0x150/0x200\n  __x64_sys_recvfrom+0x76/0x90\n  do_syscall_64+0xc3/0x6e0\n\n Allocated by task 1:\n  __kvmalloc_node_noprof+0x21b/0x700\n  nf_ct_alloc_hashtable+0x65/0xd0\n  nf_conntrack_helper_init+0x21/0x60\n  nf_conntrack_init_start+0x18d/0x300\n  nf_conntrack_standalone_init+0x12/0xc0",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-125","Out-of-bounds Read","The product reads data past the end, or before the beginning, of the intended buffer.","weakness","Draft","Base",[19],{"id":20,"name":21,"techniques":22},"CAPEC-540","Overread Buffers",[],[],[],[],[27,29,31,33,35,37,39,41,43],{"_key":28},"DEBIAN-CVE-2026-43450",{"_key":30},"SUSE-SU-2026:3130-1",{"_key":32},"RHSA-2026:36348",{"_key":34},"RHSA-2026:36349",{"_key":36},"UBUNTU-CVE-2026-43450",{"_key":38},"USN-8567-1",{"_key":40},"USN-8574-1",{"_key":42},"USN-8575-1",{"_key":44},"USN-8576-1",[],[47],{"_key":30},"2026-05-08T14:22:15.915Z","2026-05-11T22:24:49.527Z","Analyzed",{"cisa_kev":52,"cisa_ransomware":52,"cisa_vendor":9,"epss_severity":53,"epss_score":54,"severity":55,"severity_score":56,"severity_version":57,"severity_source":58,"severity_vector":59,"severity_status":50},false,"low",0.00132,"high",7.1,"v3.1","nvd","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",[61,67,71,75,79,83,87,91],{"url":62,"sources":63,"tags":65},"https://git.kernel.org/stable/c/0605e1985a95d4334a67869aee45a47e82301abf",[64,58],"cve.org",[66],"Patch",{"url":68,"sources":69,"tags":70},"https://git.kernel.org/stable/c/92441f6d9405a0c18d03f278b395e782f79a4a30",[64,58],[66],{"url":72,"sources":73,"tags":74},"https://git.kernel.org/stable/c/3cc328ffc32ddb389cba7b78b6aa95d995c2876e",[64,58],[66],{"url":76,"sources":77,"tags":78},"https://git.kernel.org/stable/c/4a1f6ee69267a5f524102c028981410eeacfa3da",[64,58],[66],{"url":80,"sources":81,"tags":82},"https://git.kernel.org/stable/c/894c5780ddadd5fde0e16f66587918e6be1504c4",[64,58],[66],{"url":84,"sources":85,"tags":86},"https://git.kernel.org/stable/c/05018cd9370f77bb18fbf6e15ff33c7a06f10b3c",[64,58],[66],{"url":88,"sources":89,"tags":90},"https://git.kernel.org/stable/c/61b3a1f8621df1a5928118313f133996f6a786db",[64,58],[66],{"url":92,"sources":93,"tags":94},"https://git.kernel.org/stable/c/6dcee8496d53165b2d8a5909b3050b62ae71fe89",[64,58],[66],[],{"date":97,"score":54,"percentile":98},"2026-07-05",0.031,[100,104,107,110,112,115,119,122,125,128,131,134,137,140,144,147,150,153,156,159,162,165,168,171,174,177,180,183,185,188,191,194,198,201,204,207,210,213,216,219,222,225,228,230,233,236,239,242,245,248,251,254,257,260,262,265,268,270],{"date":101,"score":102,"percentile":103},"2026-05-09",0.00024,0.07036,{"date":105,"score":102,"percentile":106},"2026-05-10",0.0704,{"date":108,"score":102,"percentile":109},"2026-05-11",0.07021,{"date":111,"score":102,"percentile":103},"2026-05-12",{"date":113,"score":102,"percentile":114},"2026-05-13",0.07027,{"date":116,"score":117,"percentile":118},"2026-05-14",0.00032,0.09432,{"date":120,"score":117,"percentile":121},"2026-05-15",0.09429,{"date":123,"score":117,"percentile":124},"2026-05-16",0.09443,{"date":126,"score":117,"percentile":127},"2026-05-17",0.09427,{"date":129,"score":117,"percentile":130},"2026-05-18",0.09387,{"date":132,"score":117,"percentile":133},"2026-05-19",0.09343,{"date":135,"score":117,"percentile":136},"2026-05-20",0.09344,{"date":138,"score":117,"percentile":139},"2026-05-21",0.09319,{"date":141,"score":142,"percentile":143},"2026-05-22",0.00013,0.0259,{"date":145,"score":142,"percentile":146},"2026-05-23",0.02583,{"date":148,"score":142,"percentile":149},"2026-05-24",0.02551,{"date":151,"score":142,"percentile":152},"2026-05-25",0.02539,{"date":154,"score":142,"percentile":155},"2026-05-26",0.02503,{"date":157,"score":142,"percentile":158},"2026-05-27",0.0252,{"date":160,"score":142,"percentile":161},"2026-05-28",0.02511,{"date":163,"score":142,"percentile":164},"2026-05-29",0.02518,{"date":166,"score":142,"percentile":167},"2026-05-30",0.02541,{"date":169,"score":142,"percentile":170},"2026-05-31",0.02534,{"date":172,"score":142,"percentile":173},"2026-06-01",0.02519,{"date":175,"score":142,"percentile":176},"2026-06-02",0.02495,{"date":178,"score":142,"percentile":179},"2026-06-03",0.02488,{"date":181,"score":142,"percentile":182},"2026-06-04",0.02491,{"date":184,"score":142,"percentile":155},"2026-06-05",{"date":186,"score":142,"percentile":187},"2026-06-06",0.02498,{"date":189,"score":142,"percentile":190},"2026-06-07",0.0244,{"date":192,"score":142,"percentile":193},"2026-06-08",0.02425,{"date":195,"score":196,"percentile":197},"2026-06-09",0.00015,0.03548,{"date":199,"score":196,"percentile":200},"2026-06-10",0.03539,{"date":202,"score":196,"percentile":203},"2026-06-11",0.03566,{"date":205,"score":196,"percentile":206},"2026-06-12",0.03581,{"date":208,"score":196,"percentile":209},"2026-06-13",0.03571,{"date":211,"score":196,"percentile":212},"2026-06-14",0.03586,{"date":214,"score":54,"percentile":215},"2026-06-15",0.03035,{"date":217,"score":54,"percentile":218},"2026-06-16",0.03046,{"date":220,"score":54,"percentile":221},"2026-06-17",0.03059,{"date":223,"score":54,"percentile":224},"2026-06-18",0.03061,{"date":226,"score":54,"percentile":227},"2026-06-19",0.03055,{"date":229,"score":54,"percentile":227},"2026-06-20",{"date":231,"score":54,"percentile":232},"2026-06-21",0.03053,{"date":234,"score":54,"percentile":235},"2026-06-22",0.03049,{"date":237,"score":54,"percentile":238},"2026-06-23",0.03064,{"date":240,"score":54,"percentile":241},"2026-06-24",0.03071,{"date":243,"score":54,"percentile":244},"2026-06-25",0.03084,{"date":246,"score":54,"percentile":247},"2026-06-26",0.03098,{"date":249,"score":54,"percentile":250},"2026-06-27",0.03102,{"date":252,"score":54,"percentile":253},"2026-06-28",0.03116,{"date":255,"score":54,"percentile":256},"2026-06-29",0.03112,{"date":258,"score":54,"percentile":259},"2026-06-30",0.0311,{"date":261,"score":54,"percentile":259},"2026-07-01",{"date":263,"score":54,"percentile":264},"2026-07-02",0.03101,{"date":266,"score":54,"percentile":267},"2026-07-03",0.03099,{"date":269,"score":54,"percentile":267},"2026-07-04",{"date":97,"score":54,"percentile":98},[272],{"source":58,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":273,"cvss_v4_0":9},{"baseScore":56,"baseSeverity":274,"vectorString":59,"impactScore":275,"exploitabilityScore":276},"HIGH",8.7,4.6,[278,313],{"ecosystem":9,"name":279,"vendor":280,"product":280,"cpe_part":281,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":282},"Linux","linux","a",[283,290,293,296,299,302,305,308,311],{"version":284,"is_range":285,"range_type":64,"version_start":286,"version_start_type":287,"version_end":288,"version_end_type":289,"fixed_in":9},">= 12f7a505331e6b2754684b509f2ac8f0011ce644, \u003C 0605e1985a95d4334a67869aee45a47e82301abf",true,"12f7a505331e6b2754684b509f2ac8f0011ce644","including","0605e1985a95d4334a67869aee45a47e82301abf","excluding",{"version":291,"is_range":285,"range_type":64,"version_start":286,"version_start_type":287,"version_end":292,"version_end_type":289,"fixed_in":9},">= 12f7a505331e6b2754684b509f2ac8f0011ce644, \u003C 92441f6d9405a0c18d03f278b395e782f79a4a30","92441f6d9405a0c18d03f278b395e782f79a4a30",{"version":294,"is_range":285,"range_type":64,"version_start":286,"version_start_type":287,"version_end":295,"version_end_type":289,"fixed_in":9},">= 12f7a505331e6b2754684b509f2ac8f0011ce644, \u003C 3cc328ffc32ddb389cba7b78b6aa95d995c2876e","3cc328ffc32ddb389cba7b78b6aa95d995c2876e",{"version":297,"is_range":285,"range_type":64,"version_start":286,"version_start_type":287,"version_end":298,"version_end_type":289,"fixed_in":9},">= 12f7a505331e6b2754684b509f2ac8f0011ce644, \u003C 4a1f6ee69267a5f524102c028981410eeacfa3da","4a1f6ee69267a5f524102c028981410eeacfa3da",{"version":300,"is_range":285,"range_type":64,"version_start":286,"version_start_type":287,"version_end":301,"version_end_type":289,"fixed_in":9},">= 12f7a505331e6b2754684b509f2ac8f0011ce644, \u003C 894c5780ddadd5fde0e16f66587918e6be1504c4","894c5780ddadd5fde0e16f66587918e6be1504c4",{"version":303,"is_range":285,"range_type":64,"version_start":286,"version_start_type":287,"version_end":304,"version_end_type":289,"fixed_in":9},">= 12f7a505331e6b2754684b509f2ac8f0011ce644, \u003C 05018cd9370f77bb18fbf6e15ff33c7a06f10b3c","05018cd9370f77bb18fbf6e15ff33c7a06f10b3c",{"version":306,"is_range":285,"range_type":64,"version_start":286,"version_start_type":287,"version_end":307,"version_end_type":289,"fixed_in":9},">= 12f7a505331e6b2754684b509f2ac8f0011ce644, \u003C 61b3a1f8621df1a5928118313f133996f6a786db","61b3a1f8621df1a5928118313f133996f6a786db",{"version":309,"is_range":285,"range_type":64,"version_start":286,"version_start_type":287,"version_end":310,"version_end_type":289,"fixed_in":9},">= 12f7a505331e6b2754684b509f2ac8f0011ce644, \u003C 6dcee8496d53165b2d8a5909b3050b62ae71fe89","6dcee8496d53165b2d8a5909b3050b62ae71fe89",{"version":312,"is_range":52,"range_type":64,"version_start":312,"version_start_type":287,"version_end":312,"version_end_type":287,"fixed_in":9},"3.6",{"ecosystem":9,"name":314,"vendor":280,"product":315,"cpe_part":281,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":316},"Linux Kernel","linux kernel",[317,321,325,329,333,337,341,345,347,349],{"version":318,"is_range":285,"range_type":319,"version_start":312,"version_start_type":287,"version_end":320,"version_end_type":289,"fixed_in":9},"gte3.6_lt5.10.253","cpe","5.10.253",{"version":322,"is_range":285,"range_type":319,"version_start":323,"version_start_type":287,"version_end":324,"version_end_type":289,"fixed_in":9},"gte5.11_lt5.15.203","5.11","5.15.203",{"version":326,"is_range":285,"range_type":319,"version_start":327,"version_start_type":287,"version_end":328,"version_end_type":289,"fixed_in":9},"gte5.16_lt6.1.167","5.16","6.1.167",{"version":330,"is_range":285,"range_type":319,"version_start":331,"version_start_type":287,"version_end":332,"version_end_type":289,"fixed_in":9},"gte6.2_lt6.6.130","6.2","6.6.130",{"version":334,"is_range":285,"range_type":319,"version_start":335,"version_start_type":287,"version_end":336,"version_end_type":289,"fixed_in":9},"gte6.7_lt6.12.78","6.7","6.12.78",{"version":338,"is_range":285,"range_type":319,"version_start":339,"version_start_type":287,"version_end":340,"version_end_type":289,"fixed_in":9},"gte6.13_lt6.18.19","6.13","6.18.19",{"version":342,"is_range":285,"range_type":319,"version_start":343,"version_start_type":287,"version_end":344,"version_end_type":289,"fixed_in":9},"gte6.19_lt6.19.9","6.19","6.19.9",{"version":346,"is_range":52,"range_type":319,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc1",{"version":348,"is_range":52,"range_type":319,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc2",{"version":350,"is_range":52,"range_type":319,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc3"]