PT-2026-51735

CVE-2026-52942

·

Published

2026-06-10

·

Updated

2026-10-19

Description by

CVSS 3.1
9.1
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An out-of-bounds read issue exists in the netfilter nf log component. The dump mac header() function fails to verify if the MAC header was set using skb mac header was set() in its fallback path. When the MAC header is unset, the system may read data approximately 64 KiB past the buffer into the kernel log. This can be triggered via the netdev logger when nf log unknown packet() calls dump mac header() unconditionally, specifically when a socket buffer (skb) is sent through AF PACKET with PACKET QDISC BYPASS, bypassing the function that normally resets the MAC header.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
ALSA-2026:66324
ALSA-2026:66325
AZL-90317
CLSA-2026-1788170774
CLSA-2026-1788257079
CLSA-2026-1788259625
CLSA-2026-1789958474
CLSA-2026-1791946572
ECHO-501B-91CE-D1DB
OESA-2026-3206
OESA-2026-3302
OPENSUSE-SU-2026:21555-1
RHSA-2026:66324
RHSA-2026:66325
SUSE-SU-2026:23066-1
SUSE-SU-2026:23068-1
SUSE-SU-2026:23193-1
SUSE-SU-2026:23194-1
SUSE-SU-2026:23221-1
SUSE-SU-2026:23231-1
SUSE-SU-2026:23237-1
SUSE-SU-2026:23241-1
SUSE-SU-2026:23244-1
SUSE-SU-2026:3594-1
SUSE-SU-2026:3790-1
SUSE-SU-2026:3810-1
USN-8726-1
USN-8726-2
USN-8726-3
USN-8726-4
USN-8727-1
USN-8728-1
USN-8728-2
USN-8728-3
USN-8760-1
USN-8760-2
USN-8800-1
USN-8875-1
USN-8875-2
USN-8876-1
USN-8877-1
USN-8878-1
USN-8879-1
USN-8886-1
USN-8903-1
USN-8903-2
USN-8904-1
USN-8905-1
USN-8905-2
USN-8906-1
Found an issue in the description? Have something to add? Feel free to write us 👾