CVE-2026-98793

In the Linux kernel, the following vulnerability has been resolved:

netfilter: bpf: reject invalid NAT manipulation types

As bpf_ct_set_nat_info() is not validating the NAT manipulation type a

wrong value can be passed directly to nf_nat_setup_info(). This triggers

the WARN_ON() at nf_nat_setup_info() and if panic_on_warn isn't set,

then IPS_SRC_NAT_DONE is set without adding nat_bysource and conntrack

cleanup tries to unlink an uninitialized hlist node.

Fix this by checking that NAT manipulation type is correct before

calling nf_nat_setup_info(). In addition, if the WARN_ON is hit, return

NF_DROP instead of continuing with the processing to avoid similar

situations in the future.