PT-2026-51735 · Linux+1 · Linux Kernel+1
CVE-2026-52942
·
Published
2026-06-10
·
Updated
2026-09-10
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
An out-of-bounds read issue exists in the netfilter nf log component. The
dump mac header() function fails to verify if the MAC header was set using skb mac header was set() in its fallback path. When the MAC header is unset, the system may read data approximately 64 KiB past the buffer into the kernel log. This can be triggered via the netdev logger when nf log unknown packet() calls dump mac header() unconditionally, specifically when a socket buffer (skb) is sent through AF PACKET with PACKET QDISC BYPASS, bypassing the function that normally resets the MAC header.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Buffer Overflow
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel
Ubuntu