NetSight
IP …
high8.2

CVE-2026-43452

In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: guard option walkers against 1-byte tail reads When the last byte of o…

Impact

In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: guard option walkers against 1-byte tail reads When the last byte of options is a non-single-byte option kind, walkers that advance with i += op[i + 1] ? : 1 can read op[i + 1] past the end of the option area. Add an explicit i == optlen - 1 check before dereferencing op[i + 1] in xt_tcpudp and xt_dccp option walkers.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.16 before 5.10.253
from 5.11 before 5.15.203
from 5.16 before 6.1.167
from 6.2 before 6.6.130
from 6.7 before 6.12.78
from 6.13 before 6.18.19

Weakness classification

CWE-125

References