CVE-2026-52986

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the netfilter nf conntrack sip module due to unsafe port parsing. The system used the simple strtoul() function, which assumes strings are NUL-terminated, on non-NUL-terminated skb data. This led to pointer dereferencing without proper bounds checks after the sip parse addr() function was called. The flaw is present in the epaddr len(), ct sip parse header uri(), and ct sip parse request() functions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.