---
id: CVE-2026-72433
title: 'netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak

  This needs to test for nonzero retval.
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= c54c7c685494fc0f1662091d4d0c4fc26e810471 <
    c37a39b963034cc2d141baf46017614cb1fc275f
  - >-
    Linux >= c54c7c685494fc0f1662091d4d0c4fc26e810471 <
    a853c3769b73ceb2d2b735aff621d1d51fe0553d
  - >-
    Linux >= c54c7c685494fc0f1662091d4d0c4fc26e810471 <
    b1b0b9efe641afa5c2d4ba2ec77aed7b6f4bc398
  - >-
    Linux >= c54c7c685494fc0f1662091d4d0c4fc26e810471 <
    f73b7de5338fcca7f63ca88597a050c119501531
  - >-
    Linux >= c54c7c685494fc0f1662091d4d0c4fc26e810471 <
    92c9682b36f0c8f7a1f14d4558b72793f62e90a1
  - >-
    Linux >= c54c7c685494fc0f1662091d4d0c4fc26e810471 <
    7e23965d44f06ed93fb5362fb1e321b769eecc3b
  - >-
    Linux >= c54c7c685494fc0f1662091d4d0c4fc26e810471 <
    4dce8bf588a89bef99b446136d15685a837e7acf
  - >-
    Linux >= c54c7c685494fc0f1662091d4d0c4fc26e810471 <
    27dd2997746d54ebc079bb13161cc1bdd401d4a6
  - Linux 5.3
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T16:55:19.413647Z'
published: '2026-08-15'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T17:05:42.341Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-72433'
references:
  - url: 'https://git.kernel.org/stable/c/c37a39b963034cc2d141baf46017614cb1fc275f'
  - url: 'https://git.kernel.org/stable/c/a853c3769b73ceb2d2b735aff621d1d51fe0553d'
  - url: 'https://git.kernel.org/stable/c/b1b0b9efe641afa5c2d4ba2ec77aed7b6f4bc398'
  - url: 'https://git.kernel.org/stable/c/f73b7de5338fcca7f63ca88597a050c119501531'
  - url: 'https://git.kernel.org/stable/c/92c9682b36f0c8f7a1f14d4558b72793f62e90a1'
  - url: 'https://git.kernel.org/stable/c/7e23965d44f06ed93fb5362fb1e321b769eecc3b'
  - url: 'https://git.kernel.org/stable/c/4dce8bf588a89bef99b446136d15685a837e7acf'
  - url: 'https://git.kernel.org/stable/c/27dd2997746d54ebc079bb13161cc1bdd401d4a6'
tags:
  - cve.org
epss: 0.00216
epssPercentile: 0.12135
ingestedAt: '2026-11-06T18:00:12.572Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak

This needs to test for nonzero retval.

## Affected

- `Linux >= c54c7c685494fc0f1662091d4d0c4fc26e810471 < c37a39b963034cc2d141baf46017614cb1fc275f`
- `Linux >= c54c7c685494fc0f1662091d4d0c4fc26e810471 < a853c3769b73ceb2d2b735aff621d1d51fe0553d`
- `Linux >= c54c7c685494fc0f1662091d4d0c4fc26e810471 < b1b0b9efe641afa5c2d4ba2ec77aed7b6f4bc398`
- `Linux >= c54c7c685494fc0f1662091d4d0c4fc26e810471 < f73b7de5338fcca7f63ca88597a050c119501531`
- `Linux >= c54c7c685494fc0f1662091d4d0c4fc26e810471 < 92c9682b36f0c8f7a1f14d4558b72793f62e90a1`
- `Linux >= c54c7c685494fc0f1662091d4d0c4fc26e810471 < 7e23965d44f06ed93fb5362fb1e321b769eecc3b`
- `Linux >= c54c7c685494fc0f1662091d4d0c4fc26e810471 < 4dce8bf588a89bef99b446136d15685a837e7acf`
- `Linux >= c54c7c685494fc0f1662091d4d0c4fc26e810471 < 27dd2997746d54ebc079bb13161cc1bdd401d4a6`
- `Linux 5.3`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.