In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft_ct: fix missing expect put in obj eval

nft_ct_expect_obj_eval() allocates an expectation and may call
nf_ct_expect_related(), but never drops its local reference.

Add nf_ct_expect_put(exp) before return to balance allocation.

https://git.kernel.org/stable/c/19f94b6fee75b3ef7fbc06f3745b9a771a8a19a4

https://git.kernel.org/stable/c/1dced0725e2fae3ac3416274db20a7ff5a46931d

https://git.kernel.org/stable/c/26ab32ec73941871c97562ee1f39587950dc3b68

https://git.kernel.org/stable/c/2aef1b13d5c0285f340512c6c07eb858fd018fd8

https://git.kernel.org/stable/c/7b96242ceedfe249f158419f3254bcee04173ffe

https://git.kernel.org/stable/c/84c422cea5a45fe56be839f25880f21fd33940cd

https://git.kernel.org/stable/c/cdb9a25dd3416d427e8b2753210f8baf44207577

https://git.kernel.org/stable/c/ecca618e1e339494911090474ed87742c0f73976

[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["net/netfilter/nft_ct.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"857b46027d6f91150797295752581b7155b9d0e1","lessThan":"cdb9a25dd3416d427e8b2753210f8baf44207577","versionType":"git","status":"affected"},{"version":"857b46027d6f91150797295752581b7155b9d0e1","lessThan":"26ab32ec73941871c97562ee1f39587950dc3b68","versionType":"git","status":"affected"},{"version":"857b46027d6f91150797295752581b7155b9d0e1","lessThan":"7b96242ceedfe249f158419f3254bcee04173ffe","versionType":"git","status":"affected"},{"version":"857b46027d6f91150797295752581b7155b9d0e1","lessThan":"ecca618e1e339494911090474ed87742c0f73976","versionType":"git","status":"affected"},{"version":"857b46027d6f91150797295752581b7155b9d0e1","lessThan":"2aef1b13d5c0285f340512c6c07eb858fd018fd8","versionType":"git","status":"affected"},{"version":"857b46027d6f91150797295752581b7155b9d0e1","lessThan":"1dced0725e2fae3ac3416274db20a7ff5a46931d","versionType":"git","status":"affected"},{"version":"857b46027d6f91150797295752581b7155b9d0e1","lessThan":"84c422cea5a45fe56be839f25880f21fd33940cd","versionType":"git","status":"affected"},{"version":"857b46027d6f91150797295752581b7155b9d0e1","lessThan":"19f94b6fee75b3ef7fbc06f3745b9a771a8a19a4","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["net/netfilter/nft_ct.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"5.3","status":"affected"},{"version":"0","lessThan":"5.3","versionType":"semver","status":"unaffected"},{"version":"5.10.258","lessThanOrEqual":"5.10.*","versionType":"semver","status":"unaffected"},{"version":"5.15.209","lessThanOrEqual":"5.15.*","versionType":"semver","status":"unaffected"},{"version":"6.1.175","lessThanOrEqual":"6.1.*","versionType":"semver","status":"unaffected"},{"version":"6.6.141","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.91","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.33","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.0.10","lessThanOrEqual":"7.0.*","versionType":"semver","status":"unaffected"},{"version":"7.1","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]