CVE-2026-52927

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds read exists in the compat mtw from user() function within the netfilter ebtables component. The issue occurs because the function fails to properly validate the user-supplied match size and target size when converting ebtables extensions from 32-bit user structures to kernel native structures. If a user provides a size smaller than what the extension requires, the kernel-side translation logic may perform memory accesses beyond the allocated buffer. This specifically affects matches, watchers, and targets that utilize the compat from user() callback, as these callbacks assume they can read a specific amount of bytes defined by the extension's required compatsize.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.