PT-2026-39113 · Linux · Linux Kernel

Published 2026-05-08 · Updated 2026-05-15 · CVE-2026-43452

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw in the netfilter x tables component allows for 1-byte tail reads. This occurs when the last byte of options is a non-single-byte option kind, causing walkers that advance using i += op[i + 1] ? : 1 to read op[i + 1] beyond the boundary of the option area. This affects option walkers in xt tcpudp and xt dccp.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-43452

Affected Products

Linux Kernel

References · 19

• https://git.kernel.org/stable/c/bc18551c6169eac5ed813778d3e3e484002dbbe5 · Patch
• https://git.kernel.org/stable/c/cfe770220ac2dbd3e104c6b45094037455da81d4 · Patch
• https://git.kernel.org/stable/c/ae1e1267650638136b84c23f2b31250f0ccb6823 · Patch
• https://git.kernel.org/stable/c/5b18b8b35c7cded2d17b2b2604c9b0694ff48d1c · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-43452 · Vendor Advisory
• https://git.kernel.org/stable/c/d04800323336eebf441d153f43234eac9b833d36 · Patch
• https://osv.dev/vulnerability/BELL-CVE-2026-43452 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43452 · Vendor Advisory
• https://git.kernel.org/stable/c/c2a445367a496a3c25dbc940c10c8bd1cfd4c14a · Patch
• https://git.kernel.org/stable/c/c39f84e4be1be63fc60ca7141ea7b76edcea5907 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-43452 · Security Note
• https://git.kernel.org/stable/c/9b94f0e42ed248eb31929da84ed9f5310d7ff540 · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-43452 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-43452 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-43452 · Security Note