GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2026-43452 (GCVE-0-2026-43452)

Vulnerability from cvelistv5 – Published: 2026-05-08 14:22 – Updated: 2026-08-05 12:28
VLAI
Title
netfilter: x_tables: guard option walkers against 1-byte tail reads
Summary
In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: guard option walkers against 1-byte tail reads When the last byte of options is a non-single-byte option kind, walkers that advance with i += op[i + 1] ? : 1 can read op[i + 1] past the end of the option area. Add an explicit i == optlen - 1 check before dereferencing op[i + 1] in xt_tcpudp and xt_dccp option walkers.
Severity
8.2 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 2e4e6a17af35be359cc8f1c924f8f198fbd478cc , < c2a445367a496a3c25dbc940c10c8bd1cfd4c14a (git)
Affected: 2e4e6a17af35be359cc8f1c924f8f198fbd478cc , < ae1e1267650638136b84c23f2b31250f0ccb6823 (git)
Affected: 2e4e6a17af35be359cc8f1c924f8f198fbd478cc , < c39f84e4be1be63fc60ca7141ea7b76edcea5907 (git)
Affected: 2e4e6a17af35be359cc8f1c924f8f198fbd478cc , < 9b94f0e42ed248eb31929da84ed9f5310d7ff540 (git)
Affected: 2e4e6a17af35be359cc8f1c924f8f198fbd478cc , < 5b18b8b35c7cded2d17b2b2604c9b0694ff48d1c (git)
Affected: 2e4e6a17af35be359cc8f1c924f8f198fbd478cc , < bc18551c6169eac5ed813778d3e3e484002dbbe5 (git)
Affected: 2e4e6a17af35be359cc8f1c924f8f198fbd478cc , < d04800323336eebf441d153f43234eac9b833d36 (git)
Affected: 2e4e6a17af35be359cc8f1c924f8f198fbd478cc , < cfe770220ac2dbd3e104c6b45094037455da81d4 (git)
guessed Create a notification for this product.
Linux Linux Affected: 2.6.16
Unaffected: 0 , < 2.6.16 (semver)
Unaffected: 5.10.253 , ≤ 5.10.* (semver)
Unaffected: 5.15.203 , ≤ 5.15.* (semver)
Unaffected: 6.1.167 , ≤ 6.1.* (semver)
Unaffected: 6.6.130 , ≤ 6.6.* (semver)
Unaffected: 6.12.78 , ≤ 6.12.* (semver)
Unaffected: 6.18.19 , ≤ 6.18.* (semver)
Unaffected: 6.19.9 , ≤ 6.19.* (semver)
Unaffected: 7.0 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/netfilter/xt_dccp.c",
            "net/netfilter/xt_tcpudp.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "c2a445367a496a3c25dbc940c10c8bd1cfd4c14a",
              "status": "affected",
              "version": "2e4e6a17af35be359cc8f1c924f8f198fbd478cc",
              "versionType": "git"
            },
            {
              "lessThan": "ae1e1267650638136b84c23f2b31250f0ccb6823",
              "status": "affected",
              "version": "2e4e6a17af35be359cc8f1c924f8f198fbd478cc",
              "versionType": "git"
            },
            {
              "lessThan": "c39f84e4be1be63fc60ca7141ea7b76edcea5907",
              "status": "affected",
              "version": "2e4e6a17af35be359cc8f1c924f8f198fbd478cc",
              "versionType": "git"
            },
            {
              "lessThan": "9b94f0e42ed248eb31929da84ed9f5310d7ff540",
              "status": "affected",
              "version": "2e4e6a17af35be359cc8f1c924f8f198fbd478cc",
              "versionType": "git"
            },
            {
              "lessThan": "5b18b8b35c7cded2d17b2b2604c9b0694ff48d1c",
              "status": "affected",
              "version": "2e4e6a17af35be359cc8f1c924f8f198fbd478cc",
              "versionType": "git"
            },
            {
              "lessThan": "bc18551c6169eac5ed813778d3e3e484002dbbe5",
              "status": "affected",
              "version": "2e4e6a17af35be359cc8f1c924f8f198fbd478cc",
              "versionType": "git"
            },
            {
              "lessThan": "d04800323336eebf441d153f43234eac9b833d36",
              "status": "affected",
              "version": "2e4e6a17af35be359cc8f1c924f8f198fbd478cc",
              "versionType": "git"
            },
            {
              "lessThan": "cfe770220ac2dbd3e104c6b45094037455da81d4",
              "status": "affected",
              "version": "2e4e6a17af35be359cc8f1c924f8f198fbd478cc",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/netfilter/xt_dccp.c",
            "net/netfilter/xt_tcpudp.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.16"
            },
            {
              "lessThan": "2.6.16",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.253",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.203",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.167",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.130",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.78",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.19",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.19.*",
              "status": "unaffected",
              "version": "6.19.9",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.0",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.253",
                  "versionStartIncluding": "2.6.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.203",
                  "versionStartIncluding": "2.6.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.167",
                  "versionStartIncluding": "2.6.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.130",
                  "versionStartIncluding": "2.6.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.78",
                  "versionStartIncluding": "2.6.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.19",
                  "versionStartIncluding": "2.6.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.19.9",
                  "versionStartIncluding": "2.6.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0",
                  "versionStartIncluding": "2.6.16",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: x_tables: guard option walkers against 1-byte tail reads\n\nWhen the last byte of options is a non-single-byte option kind, walkers\nthat advance with i += op[i + 1] ? : 1 can read op[i + 1] past the end\nof the option area.\n\nAdd an explicit i == optlen - 1 check before dereferencing op[i + 1]\nin xt_tcpudp and xt_dccp option walkers."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:N - In a reasonable highest-impact deployment, an internet-facing host or firewall has an x_tables TCP/DCCP option match rule installed, and the vulnerable walker is then reached by unauthenticated network packets. A remote attacker can craft TCP or DCCP options ending with a non-single-byte option kind to trigger the tail read.\nAC:L - The trigger is deterministic packet content: make the last option byte a kind value \u003e= 2 without a following length byte. There is no race, timing requirement, or attacker-uncontrolled memory layout condition needed to reach the bug.\nPR:N - The network packet path requires no local account or authentication once the affected rule is present. Although local rule installation is gated by CAP_NET_ADMIN in the network namespace and is user-namespace reachable, the highest reasonable trigger path is unauthenticated remote traffic.\nUI:N - No victim user action is required for each exploit attempt. The attacker only sends crafted packets to a system whose netfilter rules inspect TCP or DCCP options.\nS:U - The vulnerable code executes in the target kernel\u2019s own netfilter packet-processing context. It does not cross a separate security authority such as a VM or device/IOMMU boundary.\nC:L - The primitive is a strictly bounded one-byte out-of-bounds read past the option area, not an arbitrary read primitive. Because it can access adjacent kernel memory, limited confidentiality impact is the higher defensible value.\nI:N - The bug performs only an out-of-bounds read of op[i + 1]; it does not write memory or corrupt kernel structures. The read byte only affects loop advancement at the tail and does not provide an integrity-changing primitive.\nA:H - Malformed packets can repeatedly trigger a kernel out-of-bounds read in the netfilter hot path. On hardened, sanitizing, or faulting deployments this can produce an oops or panic, so availability impact is high."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T12:28:01.123Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/c2a445367a496a3c25dbc940c10c8bd1cfd4c14a"
        },
        {
          "url": "https://git.kernel.org/stable/c/ae1e1267650638136b84c23f2b31250f0ccb6823"
        },
        {
          "url": "https://git.kernel.org/stable/c/c39f84e4be1be63fc60ca7141ea7b76edcea5907"
        },
        {
          "url": "https://git.kernel.org/stable/c/9b94f0e42ed248eb31929da84ed9f5310d7ff540"
        },
        {
          "url": "https://git.kernel.org/stable/c/5b18b8b35c7cded2d17b2b2604c9b0694ff48d1c"
        },
        {
          "url": "https://git.kernel.org/stable/c/bc18551c6169eac5ed813778d3e3e484002dbbe5"
        },
        {
          "url": "https://git.kernel.org/stable/c/d04800323336eebf441d153f43234eac9b833d36"
        },
        {
          "url": "https://git.kernel.org/stable/c/cfe770220ac2dbd3e104c6b45094037455da81d4"
        }
      ],
      "title": "netfilter: x_tables: guard option walkers against 1-byte tail reads",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-43452",
    "datePublished": "2026-05-08T14:22:17.361Z",
    "dateReserved": "2026-05-01T14:12:56.010Z",
    "dateUpdated": "2026-08-05T12:28:01.123Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-43452",
      "date": "2026-09-16",
      "epss": "0.00443",
      "percentile": "0.37697"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-43452\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-05-08T15:16:57.900\",\"lastModified\":\"2026-06-17T10:49:37.710\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nnetfilter: x_tables: guard option walkers against 1-byte tail reads\\n\\nWhen the last byte of options is a non-single-byte option kind, walkers\\nthat advance with i += op[i + 1] ? : 1 can read op[i + 1] past the end\\nof the option area.\\n\\nAdd an explicit i == optlen - 1 check before dereferencing op[i + 1]\\nin xt_tcpudp and xt_dccp option walkers.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"net/netfilter/xt_dccp.c\",\"net/netfilter/xt_tcpudp.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"2e4e6a17af35be359cc8f1c924f8f198fbd478cc\",\"lessThan\":\"c2a445367a496a3c25dbc940c10c8bd1cfd4c14a\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"2e4e6a17af35be359cc8f1c924f8f198fbd478cc\",\"lessThan\":\"ae1e1267650638136b84c23f2b31250f0ccb6823\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"2e4e6a17af35be359cc8f1c924f8f198fbd478cc\",\"lessThan\":\"c39f84e4be1be63fc60ca7141ea7b76edcea5907\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"2e4e6a17af35be359cc8f1c924f8f198fbd478cc\",\"lessThan\":\"9b94f0e42ed248eb31929da84ed9f5310d7ff540\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"2e4e6a17af35be359cc8f1c924f8f198fbd478cc\",\"lessThan\":\"5b18b8b35c7cded2d17b2b2604c9b0694ff48d1c\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"2e4e6a17af35be359cc8f1c924f8f198fbd478cc\",\"lessThan\":\"bc18551c6169eac5ed813778d3e3e484002dbbe5\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"2e4e6a17af35be359cc8f1c924f8f198fbd478cc\",\"lessThan\":\"d04800323336eebf441d153f43234eac9b833d36\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"2e4e6a17af35be359cc8f1c924f8f198fbd478cc\",\"lessThan\":\"cfe770220ac2dbd3e104c6b45094037455da81d4\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"net/netfilter/xt_dccp.c\",\"net/netfilter/xt_tcpudp.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"2.6.16\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"2.6.16\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.253\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.203\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.167\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.130\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.78\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18.19\",\"lessThanOrEqual\":\"6.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.19.9\",\"lessThanOrEqual\":\"6.19.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.0\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H\",\"baseScore\":8.2,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":4.2}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.6.16\",\"versionEndExcluding\":\"5.10.253\",\"matchCriteriaId\":\"A30D1FAD-2809-4789-8667-0C7920265E9D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.203\",\"matchCriteriaId\":\"20DDB3E9-AABF-4107-ADB0-5362AA067045\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.167\",\"matchCriteriaId\":\"2EDC6BAF-B710-4E26-B6AA-D68922EE7B43\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.130\",\"matchCriteriaId\":\"C57BB918-DF28-46B3-94F7-144176841267\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.12.78\",\"matchCriteriaId\":\"28D591F5-B196-4CC9-905C-DC80F116E7A8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.13\",\"versionEndExcluding\":\"6.18.19\",\"matchCriteriaId\":\"D394AC60-6F28-435F-872A-CCDF384B8331\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.19\",\"versionEndExcluding\":\"6.19.9\",\"matchCriteriaId\":\"E825E7C3-FEAC-4FD3-8A81-78D7387948C9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"F253B622-8837-4245-BCE5-A7BF8FC76A16\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"4AE85AD8-4641-4E7C-A2F4-305E2CD9EE64\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"F666C8D8-6538-46D4-B318-87610DE64C34\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/5b18b8b35c7cded2d17b2b2604c9b0694ff48d1c\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/9b94f0e42ed248eb31929da84ed9f5310d7ff540\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/ae1e1267650638136b84c23f2b31250f0ccb6823\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/bc18551c6169eac5ed813778d3e3e484002dbbe5\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/c2a445367a496a3c25dbc940c10c8bd1cfd4c14a\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/c39f84e4be1be63fc60ca7141ea7b76edcea5907\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/cfe770220ac2dbd3e104c6b45094037455da81d4\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/d04800323336eebf441d153f43234eac9b833d36\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-07-02T19:42:36+00:00",
      "cve": "CVE-2026-43452",
      "id": "CVE-2026-43452",
      "initial_release_date": "2026-05-08T00:00:00+00:00",
      "product_status:known_affected": "274",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: netfilter: x_tables: guard option walkers against 1-byte tail reads",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43452.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-11T01:17:26Z",
      "cve": "CVE-2026-43452",
      "id": "CVE-2026-43452",
      "initial_release_date": "2026-05-13T03:33:46Z",
      "product_status:first_fixed": "2",
      "product_status:known_affected": "649",
      "product_status:recommended": "273",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-43452",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-43452.json",
      "version": "15"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.