PT-2026-51735 · Linux+1 · Linux Kernel+1

CVE-2026-52942

·

Published

2026-06-10

·

Updated

2026-09-10

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An out-of-bounds read issue exists in the netfilter nf log component. The dump mac header() function fails to verify if the MAC header was set using skb mac header was set() in its fallback path. When the MAC header is unset, the system may read data approximately 64 KiB past the buffer into the kernel log. This can be triggered via the netdev logger when nf log unknown packet() calls dump mac header() unconditionally, specifically when a socket buffer (skb) is sent through AF PACKET with PACKET QDISC BYPASS, bypassing the function that normally resets the MAC header.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Out of bounds Read

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2026:66324
ALSA-2026:66325
AZL-90317
BDU:2026-13913
CVE-2026-52942
ECHO-501B-91CE-D1DB
OESA-2026-3206
OESA-2026-3302
OPENSUSE-SU-2026:21555-1
SUSE-SU-2026:23066-1
SUSE-SU-2026:23068-1
SUSE-SU-2026:23193-1
SUSE-SU-2026:23194-1
SUSE-SU-2026:23221-1
SUSE-SU-2026:23231-1
SUSE-SU-2026:23237-1
SUSE-SU-2026:23241-1
SUSE-SU-2026:23244-1
SUSE-SU-2026:3594-1
SUSE-SU-2026:3790-1
SUSE-SU-2026:3810-1
USN-8726-1
USN-8727-1
USN-8728-1

Affected Products

Linux Kernel
Ubuntu