CVE-2026-43452

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-43452
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-43452.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-43452
Downstream
Published
2026-05-08T14:22:17.361Z
Modified
2026-05-28T03:53:24.884234181Z
Severity
  • 8.2 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H CVSS Calculator
Summary
netfilter: x_tables: guard option walkers against 1-byte tail reads
Details

In the Linux kernel, the following vulnerability has been resolved:

netfilter: x_tables: guard option walkers against 1-byte tail reads

When the last byte of options is a non-single-byte option kind, walkers that advance with i += op[i + 1] ? : 1 can read op[i + 1] past the end of the option area.

Add an explicit i == optlen - 1 check before dereferencing op[i + 1] in xttcpudp and xtdccp option walkers.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43452.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
2e4e6a17af35be359cc8f1c924f8f198fbd478cc
Fixed
c2a445367a496a3c25dbc940c10c8bd1cfd4c14a
Fixed
ae1e1267650638136b84c23f2b31250f0ccb6823
Fixed
c39f84e4be1be63fc60ca7141ea7b76edcea5907
Fixed
9b94f0e42ed248eb31929da84ed9f5310d7ff540
Fixed
5b18b8b35c7cded2d17b2b2604c9b0694ff48d1c
Fixed
bc18551c6169eac5ed813778d3e3e484002dbbe5
Fixed
d04800323336eebf441d153f43234eac9b833d36
Fixed
cfe770220ac2dbd3e104c6b45094037455da81d4

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-43452.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
2.6.16
Fixed
5.10.253
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.203
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.167
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.130
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.78
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.19
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
6.19.9

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-43452.json"