PT-2026-51708 · Linux+2 · Linux Kernel+2
CVE-2026-52915
·
Published
2026-05-16
·
Updated
2026-09-07
CVSS v3.1
7.1
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
An issue exists in the netfilter module where the
hbh mt6 check() function fails to reject optsnr values supplied from userspace that exceed the capacity of the struct ip6t opts structure. Because struct ip6t opts uses a fixed-size array opts[IP6T OPTS OPTSNR] with a limit of 16, providing a larger value can lead to an off-by-one array-index-out-of-bounds access.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Improper Validation of Array Index
Buffer Over-read
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Ubuntu