{"schema":"vulnpedia.research/1","cve":"CVE-2026-100070","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://git.kernel.org/stable/c/6828aca3d82717c2fda92af81c0dda642bc2b465","tags":["Patch"],"source":"mitre","sourceId":"Linux","modified":"2026-10-19T08:43:02.432Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-10-19T08:43:02.432Z","url":"https://git.kernel.org/stable/c/6828aca3d82717c2fda92af81c0dda642bc2b465"},{"source":"nvd","sourceId":"CVE-2026-100070","modified":"2026-10-20T18:19:31.813","url":"https://git.kernel.org/stable/c/6828aca3d82717c2fda92af81c0dda642bc2b465"}]},{"url":"https://git.kernel.org/stable/c/2703f5ea8d85bc729f433ac09ee902084c947122","tags":["Patch"],"source":"mitre","sourceId":"Linux","modified":"2026-10-19T08:43:02.432Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-10-19T08:43:02.432Z","url":"https://git.kernel.org/stable/c/2703f5ea8d85bc729f433ac09ee902084c947122"},{"source":"nvd","sourceId":"CVE-2026-100070","modified":"2026-10-20T18:19:31.813","url":"https://git.kernel.org/stable/c/2703f5ea8d85bc729f433ac09ee902084c947122"}]},{"url":"https://git.kernel.org/stable/c/0f4d30e2e49f343fc28ba1e259fd22969b940c46","tags":["Patch"],"source":"mitre","sourceId":"Linux","modified":"2026-10-19T08:43:02.432Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-10-19T08:43:02.432Z","url":"https://git.kernel.org/stable/c/0f4d30e2e49f343fc28ba1e259fd22969b940c46"},{"source":"nvd","sourceId":"CVE-2026-100070","modified":"2026-10-20T18:19:31.813","url":"https://git.kernel.org/stable/c/0f4d30e2e49f343fc28ba1e259fd22969b940c46"}]},{"url":"https://git.kernel.org/stable/c/810da5a63549531da78348b0a4545042d84e01e2","tags":["Patch"],"source":"mitre","sourceId":"Linux","modified":"2026-10-19T08:43:02.432Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-10-19T08:43:02.432Z","url":"https://git.kernel.org/stable/c/810da5a63549531da78348b0a4545042d84e01e2"},{"source":"nvd","sourceId":"CVE-2026-100070","modified":"2026-10-20T18:19:31.813","url":"https://git.kernel.org/stable/c/810da5a63549531da78348b0a4545042d84e01e2"}]},{"url":"https://git.kernel.org/stable/c/668cc1c30caedc63070b10d17d5514748988a140","tags":["Patch"],"source":"mitre","sourceId":"Linux","modified":"2026-10-19T08:43:02.432Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-10-19T08:43:02.432Z","url":"https://git.kernel.org/stable/c/668cc1c30caedc63070b10d17d5514748988a140"},{"source":"nvd","sourceId":"CVE-2026-100070","modified":"2026-10-20T18:19:31.813","url":"https://git.kernel.org/stable/c/668cc1c30caedc63070b10d17d5514748988a140"}]},{"url":"https://git.kernel.org/stable/c/e70d48fcf8382581162608a4a322919bfd22aef3","tags":["Patch"],"source":"mitre","sourceId":"Linux","modified":"2026-10-19T08:43:02.432Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-10-19T08:43:02.432Z","url":"https://git.kernel.org/stable/c/e70d48fcf8382581162608a4a322919bfd22aef3"},{"source":"nvd","sourceId":"CVE-2026-100070","modified":"2026-10-20T18:19:31.813","url":"https://git.kernel.org/stable/c/e70d48fcf8382581162608a4a322919bfd22aef3"}]},{"url":"https://git.kernel.org/stable/c/c408d416618ebb8a95e3097a13f3b793ea9272ee","tags":["Patch"],"source":"mitre","sourceId":"Linux","modified":"2026-10-19T08:43:02.432Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-10-19T08:43:02.432Z","url":"https://git.kernel.org/stable/c/c408d416618ebb8a95e3097a13f3b793ea9272ee"},{"source":"nvd","sourceId":"CVE-2026-100070","modified":"2026-10-20T18:19:31.813","url":"https://git.kernel.org/stable/c/c408d416618ebb8a95e3097a13f3b793ea9272ee"}]},{"url":"https://git.kernel.org/stable/c/16aecbe3036f6097c26b51b12e4c1cf207769690","tags":["Patch"],"source":"mitre","sourceId":"Linux","modified":"2026-10-19T08:43:02.432Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-10-19T08:43:02.432Z","url":"https://git.kernel.org/stable/c/16aecbe3036f6097c26b51b12e4c1cf207769690"},{"source":"nvd","sourceId":"CVE-2026-100070","modified":"2026-10-20T18:19:31.813","url":"https://git.kernel.org/stable/c/16aecbe3036f6097c26b51b12e4c1cf207769690"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-100070","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-100070"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2541421","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2541421"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-100070","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-100070"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100070","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100070"}]},{"url":"https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-100070.mbox","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-100070.mbox"}]},{"source":"euvd","sourceId":"EUVD-2026-87067","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87067","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-87067","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87067"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json","productId":"red_hat_enterprise_linux_10:kernel","product":"kernel as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"The vulnerable code path is only reachable when the SIP connection tracking/NAT helper is enabled, which is not the default configuration. On systems where the SIP NAT helper has been explicitly enabled, disabling it (for example, by unloading or preventing the loading of the nf_conntrack_sip and nf_nat_sip kernel modules, or by disabling automatic conntrack helper assignment for SIP traffic) prevents netfilter from rewriting SIP payloads and thereby prevents untranslated Contact headers from being sent to external recipients. Note that disabling the helper also disables SIP application-level gateway (ALG) processing, which may affect SIP deployments that rely on it, so the operational impact should be evaluated before applying this change."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/kernel","origins":[{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json"}]},{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json","productId":"red_hat_enterprise_linux_10:kernel-abi-stablelists","product":"kernel-abi-stablelists as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"The vulnerable code path is only reachable when the SIP connection tracking/NAT helper is enabled, which is not the default configuration. On systems where the SIP NAT helper has been explicitly enabled, disabling it (for example, by unloading or preventing the loading of the nf_conntrack_sip and nf_nat_sip kernel modules, or by disabling automatic conntrack helper assignment for SIP traffic) prevents netfilter from rewriting SIP payloads and thereby prevents untranslated Contact headers from being sent to external recipients. Note that disabling the helper also disables SIP application-level gateway (ALG) processing, which may affect SIP deployments that rely on it, so the operational impact should be evaluated before applying this change."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/kernel-abi-stablelists","origins":[{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json"}]},{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json","productId":"red_hat_enterprise_linux_10:kernel-modules-extra-matched","product":"kernel-modules-extra-matched as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"The vulnerable code path is only reachable when the SIP connection tracking/NAT helper is enabled, which is not the default configuration. On systems where the SIP NAT helper has been explicitly enabled, disabling it (for example, by unloading or preventing the loading of the nf_conntrack_sip and nf_nat_sip kernel modules, or by disabling automatic conntrack helper assignment for SIP traffic) prevents netfilter from rewriting SIP payloads and thereby prevents untranslated Contact headers from being sent to external recipients. Note that disabling the helper also disables SIP application-level gateway (ALG) processing, which may affect SIP deployments that rely on it, so the operational impact should be evaluated before applying this change."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/kernel-modules-extra-matched","origins":[{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json"}]},{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json","productId":"red_hat_enterprise_linux_10:kernel-rt-core","product":"kernel-rt-core as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"The vulnerable code path is only reachable when the SIP connection tracking/NAT helper is enabled, which is not the default configuration. On systems where the SIP NAT helper has been explicitly enabled, disabling it (for example, by unloading or preventing the loading of the nf_conntrack_sip and nf_nat_sip kernel modules, or by disabling automatic conntrack helper assignment for SIP traffic) prevents netfilter from rewriting SIP payloads and thereby prevents untranslated Contact headers from being sent to external recipients. Note that disabling the helper also disables SIP application-level gateway (ALG) processing, which may affect SIP deployments that rely on it, so the operational impact should be evaluated before applying this change."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/kernel-rt-core","origins":[{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json"}]},{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json","productId":"red_hat_enterprise_linux_10:kernel-uki-virt","product":"kernel-uki-virt as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"The vulnerable code path is only reachable when the SIP connection tracking/NAT helper is enabled, which is not the default configuration. On systems where the SIP NAT helper has been explicitly enabled, disabling it (for example, by unloading or preventing the loading of the nf_conntrack_sip and nf_nat_sip kernel modules, or by disabling automatic conntrack helper assignment for SIP traffic) prevents netfilter from rewriting SIP payloads and thereby prevents untranslated Contact headers from being sent to external recipients. Note that disabling the helper also disables SIP application-level gateway (ALG) processing, which may affect SIP deployments that rely on it, so the operational impact should be evaluated before applying this change."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/kernel-uki-virt","origins":[{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json"}]},{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json","productId":"red_hat_enterprise_linux_7:bpftool","product":"bpftool as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"workaround","details":"The vulnerable code path is only reachable when the SIP connection tracking/NAT helper is enabled, which is not the default configuration. On systems where the SIP NAT helper has been explicitly enabled, disabling it (for example, by unloading or preventing the loading of the nf_conntrack_sip and nf_nat_sip kernel modules, or by disabling automatic conntrack helper assignment for SIP traffic) prevents netfilter from rewriting SIP payloads and thereby prevents untranslated Contact headers from being sent to external recipients. Note that disabling the helper also disables SIP application-level gateway (ALG) processing, which may affect SIP deployments that rely on it, so the operational impact should be evaluated before applying this change."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/bpftool","origins":[{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json"}]},{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json","productId":"red_hat_enterprise_linux_7:kernel-rt-devel","product":"kernel-rt-devel as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"workaround","details":"The vulnerable code path is only reachable when the SIP connection tracking/NAT helper is enabled, which is not the default configuration. On systems where the SIP NAT helper has been explicitly enabled, disabling it (for example, by unloading or preventing the loading of the nf_conntrack_sip and nf_nat_sip kernel modules, or by disabling automatic conntrack helper assignment for SIP traffic) prevents netfilter from rewriting SIP payloads and thereby prevents untranslated Contact headers from being sent to external recipients. Note that disabling the helper also disables SIP application-level gateway (ALG) processing, which may affect SIP deployments that rely on it, so the operational impact should be evaluated before applying this change."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/kernel-rt-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json"}]},{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json","productId":"red_hat_enterprise_linux_8:kernel-abi-whitelists","product":"kernel-abi-whitelists as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"The vulnerable code path is only reachable when the SIP connection tracking/NAT helper is enabled, which is not the default configuration. On systems where the SIP NAT helper has been explicitly enabled, disabling it (for example, by unloading or preventing the loading of the nf_conntrack_sip and nf_nat_sip kernel modules, or by disabling automatic conntrack helper assignment for SIP traffic) prevents netfilter from rewriting SIP payloads and thereby prevents untranslated Contact headers from being sent to external recipients. Note that disabling the helper also disables SIP application-level gateway (ALG) processing, which may affect SIP deployments that rely on it, so the operational impact should be evaluated before applying this change."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/kernel-abi-whitelists","origins":[{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json"}]},{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json","productId":"red_hat_enterprise_linux_8:kernel-modules-internal","product":"kernel-modules-internal as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"The vulnerable code path is only reachable when the SIP connection tracking/NAT helper is enabled, which is not the default configuration. On systems where the SIP NAT helper has been explicitly enabled, disabling it (for example, by unloading or preventing the loading of the nf_conntrack_sip and nf_nat_sip kernel modules, or by disabling automatic conntrack helper assignment for SIP traffic) prevents netfilter from rewriting SIP payloads and thereby prevents untranslated Contact headers from being sent to external recipients. Note that disabling the helper also disables SIP application-level gateway (ALG) processing, which may affect SIP deployments that rely on it, so the operational impact should be evaluated before applying this change."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/kernel-modules-internal","origins":[{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json"}]},{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json","productId":"red_hat_enterprise_linux_8:kernel-rt.src","product":"kernel-rt.src as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"The vulnerable code path is only reachable when the SIP connection tracking/NAT helper is enabled, which is not the default configuration. On systems where the SIP NAT helper has been explicitly enabled, disabling it (for example, by unloading or preventing the loading of the nf_conntrack_sip and nf_nat_sip kernel modules, or by disabling automatic conntrack helper assignment for SIP traffic) prevents netfilter from rewriting SIP payloads and thereby prevents untranslated Contact headers from being sent to external recipients. Note that disabling the helper also disables SIP application-level gateway (ALG) processing, which may affect SIP deployments that rely on it, so the operational impact should be evaluated before applying this change."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/kernel-rt?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json"}]},{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json","productId":"red_hat_enterprise_linux_9:kernel","product":"kernel as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"The vulnerable code path is only reachable when the SIP connection tracking/NAT helper is enabled, which is not the default configuration. On systems where the SIP NAT helper has been explicitly enabled, disabling it (for example, by unloading or preventing the loading of the nf_conntrack_sip and nf_nat_sip kernel modules, or by disabling automatic conntrack helper assignment for SIP traffic) prevents netfilter from rewriting SIP payloads and thereby prevents untranslated Contact headers from being sent to external recipients. Note that disabling the helper also disables SIP application-level gateway (ALG) processing, which may affect SIP deployments that rely on it, so the operational impact should be evaluated before applying this change."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/kernel","origins":[{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json"}]},{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json","productId":"red_hat_enterprise_linux_9:kernel-64k-modules-extra","product":"kernel-64k-modules-extra as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"The vulnerable code path is only reachable when the SIP connection tracking/NAT helper is enabled, which is not the default configuration. On systems where the SIP NAT helper has been explicitly enabled, disabling it (for example, by unloading or preventing the loading of the nf_conntrack_sip and nf_nat_sip kernel modules, or by disabling automatic conntrack helper assignment for SIP traffic) prevents netfilter from rewriting SIP payloads and thereby prevents untranslated Contact headers from being sent to external recipients. Note that disabling the helper also disables SIP application-level gateway (ALG) processing, which may affect SIP deployments that rely on it, so the operational impact should be evaluated before applying this change."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/kernel-64k-modules-extra","origins":[{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json"}]},{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json","productId":"red_hat_enterprise_linux_9:kernel-debug-uki-virt","product":"kernel-debug-uki-virt as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"The vulnerable code path is only reachable when the SIP connection tracking/NAT helper is enabled, which is not the default configuration. On systems where the SIP NAT helper has been explicitly enabled, disabling it (for example, by unloading or preventing the loading of the nf_conntrack_sip and nf_nat_sip kernel modules, or by disabling automatic conntrack helper assignment for SIP traffic) prevents netfilter from rewriting SIP payloads and thereby prevents untranslated Contact headers from being sent to external recipients. Note that disabling the helper also disables SIP application-level gateway (ALG) processing, which may affect SIP deployments that rely on it, so the operational impact should be evaluated before applying this change."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/kernel-debug-uki-virt","origins":[{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json"}]},{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json","productId":"red_hat_enterprise_linux_9:kernel-rt-64k-debug","product":"kernel-rt-64k-debug as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"The vulnerable code path is only reachable when the SIP connection tracking/NAT helper is enabled, which is not the default configuration. On systems where the SIP NAT helper has been explicitly enabled, disabling it (for example, by unloading or preventing the loading of the nf_conntrack_sip and nf_nat_sip kernel modules, or by disabling automatic conntrack helper assignment for SIP traffic) prevents netfilter from rewriting SIP payloads and thereby prevents untranslated Contact headers from being sent to external recipients. Note that disabling the helper also disables SIP application-level gateway (ALG) processing, which may affect SIP deployments that rely on it, so the operational impact should be evaluated before applying this change."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/kernel-rt-64k-debug","origins":[{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json"}]},{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json","productId":"red_hat_enterprise_linux_9:kernel-rt-64k-modules-internal","product":"kernel-rt-64k-modules-internal as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"The vulnerable code path is only reachable when the SIP connection tracking/NAT helper is enabled, which is not the default configuration. On systems where the SIP NAT helper has been explicitly enabled, disabling it (for example, by unloading or preventing the loading of the nf_conntrack_sip and nf_nat_sip kernel modules, or by disabling automatic conntrack helper assignment for SIP traffic) prevents netfilter from rewriting SIP payloads and thereby prevents untranslated Contact headers from being sent to external recipients. Note that disabling the helper also disables SIP application-level gateway (ALG) processing, which may affect SIP deployments that rely on it, so the operational impact should be evaluated before applying this change."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/kernel-rt-64k-modules-internal","origins":[{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json"}]},{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json","productId":"red_hat_enterprise_linux_9:kernel-rt-kvm","product":"kernel-rt-kvm as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"The vulnerable code path is only reachable when the SIP connection tracking/NAT helper is enabled, which is not the default configuration. On systems where the SIP NAT helper has been explicitly enabled, disabling it (for example, by unloading or preventing the loading of the nf_conntrack_sip and nf_nat_sip kernel modules, or by disabling automatic conntrack helper assignment for SIP traffic) prevents netfilter from rewriting SIP payloads and thereby prevents untranslated Contact headers from being sent to external recipients. Note that disabling the helper also disables SIP application-level gateway (ALG) processing, which may affect SIP deployments that rely on it, so the operational impact should be evaluated before applying this change."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/kernel-rt-kvm","origins":[{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json"}]},{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json","productId":"red_hat_enterprise_linux_9:kernel-zfcpdump-devel","product":"kernel-zfcpdump-devel as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"The vulnerable code path is only reachable when the SIP connection tracking/NAT helper is enabled, which is not the default configuration. On systems where the SIP NAT helper has been explicitly enabled, disabling it (for example, by unloading or preventing the loading of the nf_conntrack_sip and nf_nat_sip kernel modules, or by disabling automatic conntrack helper assignment for SIP traffic) prevents netfilter from rewriting SIP payloads and thereby prevents untranslated Contact headers from being sent to external recipients. Note that disabling the helper also disables SIP application-level gateway (ALG) processing, which may affect SIP deployments that rely on it, so the operational impact should be evaluated before applying this change."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/kernel-zfcpdump-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json"}]},{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json","productId":"red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-9","product":"openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4","status":"known_affected","remediations":[{"category":"workaround","details":"The vulnerable code path is only reachable when the SIP connection tracking/NAT helper is enabled, which is not the default configuration. On systems where the SIP NAT helper has been explicitly enabled, disabling it (for example, by unloading or preventing the loading of the nf_conntrack_sip and nf_nat_sip kernel modules, or by disabling automatic conntrack helper assignment for SIP traffic) prevents netfilter from rewriting SIP payloads and thereby prevents untranslated Contact headers from being sent to external recipients. Note that disabling the helper also disables SIP application-level gateway (ALG) processing, which may affect SIP deployments that rely on it, so the operational impact should be evaluated before applying this change."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/ose-rhel-coreos-9?repository_url=registry.redhat.io/openshift/ose-rhel-coreos-9","origins":[{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json"}]},{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json","productId":"red_hat_enterprise_linux_6:kernel","product":"kernel as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel","origins":[{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json"}]},{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json","productId":"red_hat_enterprise_linux_6:kernel-abi-whitelists","product":"kernel-abi-whitelists as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-abi-whitelists","origins":[{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json"}]},{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json","productId":"red_hat_enterprise_linux_6:kernel-bootwrapper","product":"kernel-bootwrapper as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-bootwrapper","origins":[{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json"}]},{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json","productId":"red_hat_enterprise_linux_6:kernel-debug","product":"kernel-debug as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-debug","origins":[{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json"}]},{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json","productId":"red_hat_enterprise_linux_6:kernel-debug-devel","product":"kernel-debug-devel as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-debug-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json"}]},{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json","productId":"red_hat_enterprise_linux_6:kernel-devel","product":"kernel-devel as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json"}]},{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json","productId":"red_hat_enterprise_linux_6:kernel-doc","product":"kernel-doc as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-doc","origins":[{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json"}]},{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json","productId":"red_hat_enterprise_linux_6:kernel-firmware","product":"kernel-firmware as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-firmware","origins":[{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json"}]},{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json","productId":"red_hat_enterprise_linux_6:kernel-headers","product":"kernel-headers as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-headers","origins":[{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json"}]},{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json","productId":"red_hat_enterprise_linux_6:kernel-kdump","product":"kernel-kdump as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-kdump","origins":[{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json"}]},{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json","productId":"red_hat_enterprise_linux_6:kernel-kdump-devel","product":"kernel-kdump-devel as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-kdump-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json"}]},{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json","productId":"red_hat_enterprise_linux_6:kernel.src","product":"kernel.src as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json"}]},{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json","productId":"red_hat_enterprise_linux_6:perf","product":"perf as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/perf","origins":[{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json"}]},{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json","productId":"red_hat_enterprise_linux_6:python-perf","product":"python-perf as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/python-perf","origins":[{"source":"redhat","sourceId":"CVE-2026-100070","modified":"2026-10-20T19:55:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100070.json"}]}],"vendorCoverage":{"total":277,"shown":32,"omitted":245,"source":"redhat"}}