Vulnerability-Lookup

CVE-2026-45841 (GCVE-0-2026-45841)

Vulnerability from cvelistv5 – Published: 2026-05-27 09:24 – Updated: 2026-09-08 08:48

Title

netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO

Summary

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO nf_osf_match_one() computes ctx->window % f->wss.val in the OSF_WSS_MODULO branch with no guard for f->wss.val == 0. A CAP_NET_ADMIN user can add such a fingerprint via nfnetlink; a subsequent matching TCP SYN divides by zero and panics the kernel. Reject the bogus fingerprint in nfnl_osf_add_callback() above the per-option for-loop. f->wss is per-fingerprint, not per-option, so the check must run regardless of f->opt_num (including 0). Also reject wss.wc >= OSF_WSS_MAX; nf_osf_match_one() already treats that as "should not happen". Crash: Oops: divide error: 0000 [#1] SMP KASAN NOPTI RIP: 0010:nf_osf_match_one (net/netfilter/nfnetlink_osf.c:98) Call Trace: <IRQ> nf_osf_match (net/netfilter/nfnetlink_osf.c:220) xt_osf_match_packet (net/netfilter/xt_osf.c:32) ipt_do_table (net/ipv4/netfilter/ip_tables.c:348) nf_hook_slow (net/netfilter/core.c:622) ip_local_deliver (net/ipv4/ip_input.c:265) ip_rcv (include/linux/skbuff.h:1162) __netif_receive_skb_one_core (net/core/dev.c:6181) process_backlog (net/core/dev.c:6642) __napi_poll (net/core/dev.c:7710) net_rx_action (net/core/dev.c:7945) handle_softirqs (kernel/softirq.c:622)

Severity

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Assigner

Linux mitre root

References

9 references

URL	Tags
https://git.kernel.org/stable/c/cb833bbc1b3c51e08…
https://git.kernel.org/stable/c/26900306a5a2c3e4f…
https://git.kernel.org/stable/c/0694618cf3e9b1206…
https://git.kernel.org/stable/c/8def8fbd23f40e945…
https://git.kernel.org/stable/c/c55940895245d8ef6…
https://git.kernel.org/stable/c/fb965b1cfe92b28d2…
https://git.kernel.org/stable/c/9a05e195618a6d474…
https://git.kernel.org/stable/c/2195574dc6d9017d3…
https://cert-portal.siemens.com/productcert/html/…

Impacted products

5 products

Vendor	Product	Version	CPE status
Linux	Linux	Affected: 11eeef41d5f63c7d2f7fdfcc733eb7fb137cc384 , < cb833bbc1b3c51e08652d3c86298307c07d3f2db (git) Affected: 11eeef41d5f63c7d2f7fdfcc733eb7fb137cc384 , < 26900306a5a2c3e4f75c643a064525526bb6e5f3 (git) Affected: 11eeef41d5f63c7d2f7fdfcc733eb7fb137cc384 , < 0694618cf3e9b120666e31f5f383a6e466d95a0d (git) Affected: 11eeef41d5f63c7d2f7fdfcc733eb7fb137cc384 , < 8def8fbd23f40e945febe913d04b731012ce0082 (git) Affected: 11eeef41d5f63c7d2f7fdfcc733eb7fb137cc384 , < c55940895245d8ef658ab381248a28755218d625 (git) Affected: 11eeef41d5f63c7d2f7fdfcc733eb7fb137cc384 , < fb965b1cfe92b28d28b5ebe3116b81dbef9f2d2f (git) Affected: 11eeef41d5f63c7d2f7fdfcc733eb7fb137cc384 , < 9a05e195618a6d474f2bcd5b6376d0ffc2f00366 (git) Affected: 11eeef41d5f63c7d2f7fdfcc733eb7fb137cc384 , < 2195574dc6d9017d32ac346987e12659f931d932 (git)	guessed
Linux	Linux	Affected: 2.6.31 Unaffected: 0 , < 2.6.31 (semver) Unaffected: 5.10.258 , ≤ 5.10.* (semver) Unaffected: 5.15.209 , ≤ 5.15.* (semver) Unaffected: 6.1.175 , ≤ 6.1.* (semver) Unaffected: 6.6.141 , ≤ 6.6.* (semver) Unaffected: 6.12.91 , ≤ 6.12.* (semver) Unaffected: 6.18.33 , ≤ 6.18.* (semver) Unaffected: 7.0.10 , ≤ 7.0.* (semver) Unaffected: 7.1 , ≤ * (original_commit_for_fix)	guessed
Siemens	SIMATIC S7-1500 CPU 1518-4 PN/DP MFP	Affected: V3.1.6 , < * (custom)	guessed
Siemens	SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP	Affected: V3.1.6 , < * (custom)	guessed
Siemens	SIPLUS S7-1500 CPU 1518-4 PN/DP MFP	Affected: V3.1.6 , < * (custom)	guessed

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPLUS S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-08T08:48:59.945Z",
          "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
          "shortName": "siemens-SADP"
        },
        "references": [
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-019113.html"
          }
        ],
        "x_adpType": "supplier"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/netfilter/nfnetlink_osf.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "cb833bbc1b3c51e08652d3c86298307c07d3f2db",
              "status": "affected",
              "version": "11eeef41d5f63c7d2f7fdfcc733eb7fb137cc384",
              "versionType": "git"
            },
            {
              "lessThan": "26900306a5a2c3e4f75c643a064525526bb6e5f3",
              "status": "affected",
              "version": "11eeef41d5f63c7d2f7fdfcc733eb7fb137cc384",
              "versionType": "git"
            },
            {
              "lessThan": "0694618cf3e9b120666e31f5f383a6e466d95a0d",
              "status": "affected",
              "version": "11eeef41d5f63c7d2f7fdfcc733eb7fb137cc384",
              "versionType": "git"
            },
            {
              "lessThan": "8def8fbd23f40e945febe913d04b731012ce0082",
              "status": "affected",
              "version": "11eeef41d5f63c7d2f7fdfcc733eb7fb137cc384",
              "versionType": "git"
            },
            {
              "lessThan": "c55940895245d8ef658ab381248a28755218d625",
              "status": "affected",
              "version": "11eeef41d5f63c7d2f7fdfcc733eb7fb137cc384",
              "versionType": "git"
            },
            {
              "lessThan": "fb965b1cfe92b28d28b5ebe3116b81dbef9f2d2f",
              "status": "affected",
              "version": "11eeef41d5f63c7d2f7fdfcc733eb7fb137cc384",
              "versionType": "git"
            },
            {
              "lessThan": "9a05e195618a6d474f2bcd5b6376d0ffc2f00366",
              "status": "affected",
              "version": "11eeef41d5f63c7d2f7fdfcc733eb7fb137cc384",
              "versionType": "git"
            },
            {
              "lessThan": "2195574dc6d9017d32ac346987e12659f931d932",
              "status": "affected",
              "version": "11eeef41d5f63c7d2f7fdfcc733eb7fb137cc384",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/netfilter/nfnetlink_osf.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.31"
            },
            {
              "lessThan": "2.6.31",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.258",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.209",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.175",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.141",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.91",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.33",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.0.*",
              "status": "unaffected",
              "version": "7.0.10",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.258",
                  "versionStartIncluding": "2.6.31",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.209",
                  "versionStartIncluding": "2.6.31",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.175",
                  "versionStartIncluding": "2.6.31",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.141",
                  "versionStartIncluding": "2.6.31",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.91",
                  "versionStartIncluding": "2.6.31",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.33",
                  "versionStartIncluding": "2.6.31",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0.10",
                  "versionStartIncluding": "2.6.31",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1",
                  "versionStartIncluding": "2.6.31",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO\n\nnf_osf_match_one() computes ctx-\u003ewindow % f-\u003ewss.val in the\nOSF_WSS_MODULO branch with no guard for f-\u003ewss.val == 0. A\nCAP_NET_ADMIN user can add such a fingerprint via nfnetlink; a\nsubsequent matching TCP SYN divides by zero and panics the kernel.\n\nReject the bogus fingerprint in nfnl_osf_add_callback() above the\nper-option for-loop. f-\u003ewss is per-fingerprint, not per-option, so\nthe check must run regardless of f-\u003eopt_num (including 0). Also\nreject wss.wc \u003e= OSF_WSS_MAX; nf_osf_match_one() already treats that\nas \"should not happen\".\n\nCrash:\n Oops: divide error: 0000 [#1] SMP KASAN NOPTI\n RIP: 0010:nf_osf_match_one (net/netfilter/nfnetlink_osf.c:98)\n Call Trace:\n \u003cIRQ\u003e\n  nf_osf_match (net/netfilter/nfnetlink_osf.c:220)\n  xt_osf_match_packet (net/netfilter/xt_osf.c:32)\n  ipt_do_table (net/ipv4/netfilter/ip_tables.c:348)\n  nf_hook_slow (net/netfilter/core.c:622)\n  ip_local_deliver (net/ipv4/ip_input.c:265)\n  ip_rcv (include/linux/skbuff.h:1162)\n  __netif_receive_skb_one_core (net/core/dev.c:6181)\n  process_backlog (net/core/dev.c:6642)\n  __napi_poll (net/core/dev.c:7710)\n  net_rx_action (net/core/dev.c:7945)\n  handle_softirqs (kernel/softirq.c:622)"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-14T17:46:14.099Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/cb833bbc1b3c51e08652d3c86298307c07d3f2db"
        },
        {
          "url": "https://git.kernel.org/stable/c/26900306a5a2c3e4f75c643a064525526bb6e5f3"
        },
        {
          "url": "https://git.kernel.org/stable/c/0694618cf3e9b120666e31f5f383a6e466d95a0d"
        },
        {
          "url": "https://git.kernel.org/stable/c/8def8fbd23f40e945febe913d04b731012ce0082"
        },
        {
          "url": "https://git.kernel.org/stable/c/c55940895245d8ef658ab381248a28755218d625"
        },
        {
          "url": "https://git.kernel.org/stable/c/fb965b1cfe92b28d28b5ebe3116b81dbef9f2d2f"
        },
        {
          "url": "https://git.kernel.org/stable/c/9a05e195618a6d474f2bcd5b6376d0ffc2f00366"
        },
        {
          "url": "https://git.kernel.org/stable/c/2195574dc6d9017d32ac346987e12659f931d932"
        }
      ],
      "title": "netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-45841",
    "datePublished": "2026-05-27T09:24:40.805Z",
    "dateReserved": "2026-05-13T15:03:33.078Z",
    "dateUpdated": "2026-09-08T08:48:59.945Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-45841",
      "date": "2026-09-14",
      "epss": "0.00129",
      "percentile": "0.02942"
    },
    "microsoft_vex": {
      "current_release_date": "2026-06-09T14:48:38.000Z",
      "cve": "CVE-2026-45841",
      "id": "msrc_CVE-2026-45841",
      "initial_release_date": "2026-05-02T00:00:00.000Z",
      "product_status:fixed": "1",
      "product_status:known_affected": "1",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO",
      "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-45841.json",
      "version": "3"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-45841\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-05-27T11:16:23.493\",\"lastModified\":\"2026-09-08T09:18:06.090\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nnetfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO\\n\\nnf_osf_match_one() computes ctx-\u003ewindow % f-\u003ewss.val in the\\nOSF_WSS_MODULO branch with no guard for f-\u003ewss.val == 0. A\\nCAP_NET_ADMIN user can add such a fingerprint via nfnetlink; a\\nsubsequent matching TCP SYN divides by zero and panics the kernel.\\n\\nReject the bogus fingerprint in nfnl_osf_add_callback() above the\\nper-option for-loop. f-\u003ewss is per-fingerprint, not per-option, so\\nthe check must run regardless of f-\u003eopt_num (including 0). Also\\nreject wss.wc \u003e= OSF_WSS_MAX; nf_osf_match_one() already treats that\\nas \\\"should not happen\\\".\\n\\nCrash:\\n Oops: divide error: 0000 [#1] SMP KASAN NOPTI\\n RIP: 0010:nf_osf_match_one (net/netfilter/nfnetlink_osf.c:98)\\n Call Trace:\\n \u003cIRQ\u003e\\n  nf_osf_match (net/netfilter/nfnetlink_osf.c:220)\\n  xt_osf_match_packet (net/netfilter/xt_osf.c:32)\\n  ipt_do_table (net/ipv4/netfilter/ip_tables.c:348)\\n  nf_hook_slow (net/netfilter/core.c:622)\\n  ip_local_deliver (net/ipv4/ip_input.c:265)\\n  ip_rcv (include/linux/skbuff.h:1162)\\n  __netif_receive_skb_one_core (net/core/dev.c:6181)\\n  process_backlog (net/core/dev.c:6642)\\n  __napi_poll (net/core/dev.c:7710)\\n  net_rx_action (net/core/dev.c:7945)\\n  handle_softirqs (kernel/softirq.c:622)\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"net/netfilter/nfnetlink_osf.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"11eeef41d5f63c7d2f7fdfcc733eb7fb137cc384\",\"lessThan\":\"cb833bbc1b3c51e08652d3c86298307c07d3f2db\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"11eeef41d5f63c7d2f7fdfcc733eb7fb137cc384\",\"lessThan\":\"26900306a5a2c3e4f75c643a064525526bb6e5f3\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"11eeef41d5f63c7d2f7fdfcc733eb7fb137cc384\",\"lessThan\":\"0694618cf3e9b120666e31f5f383a6e466d95a0d\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"11eeef41d5f63c7d2f7fdfcc733eb7fb137cc384\",\"lessThan\":\"8def8fbd23f40e945febe913d04b731012ce0082\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"11eeef41d5f63c7d2f7fdfcc733eb7fb137cc384\",\"lessThan\":\"c55940895245d8ef658ab381248a28755218d625\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"11eeef41d5f63c7d2f7fdfcc733eb7fb137cc384\",\"lessThan\":\"fb965b1cfe92b28d28b5ebe3116b81dbef9f2d2f\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"11eeef41d5f63c7d2f7fdfcc733eb7fb137cc384\",\"lessThan\":\"9a05e195618a6d474f2bcd5b6376d0ffc2f00366\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"11eeef41d5f63c7d2f7fdfcc733eb7fb137cc384\",\"lessThan\":\"2195574dc6d9017d32ac346987e12659f931d932\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"net/netfilter/nfnetlink_osf.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"2.6.31\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"2.6.31\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.258\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.209\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.175\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.141\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.91\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18.33\",\"lessThanOrEqual\":\"6.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.0.10\",\"lessThanOrEqual\":\"7.0.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.1\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]},{\"source\":\"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\",\"affectedData\":[{\"vendor\":\"Siemens\",\"product\":\"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"V3.1.6\",\"lessThan\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"V3.1.6\",\"lessThan\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"V3.1.6\",\"lessThan\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"V3.1.6\",\"lessThan\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"V3.1.6\",\"lessThan\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-369\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.6.31\",\"versionEndExcluding\":\"5.10.258\",\"matchCriteriaId\":\"06FFC430-8D78-4549-B8DB-B37AFAF4D4D3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.209\",\"matchCriteriaId\":\"919C10A9-7951-4A74-BADD-C135A0A8D8B4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.175\",\"matchCriteriaId\":\"92385813-D91D-480D-83A1-F423D2CBB2BA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.141\",\"matchCriteriaId\":\"97A9FFFA-22BB-4D5C-9790-5A2286E392F7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.12.91\",\"matchCriteriaId\":\"C918746B-DE6F-448F-A93E-A04C5481688D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.13\",\"versionEndExcluding\":\"6.18.33\",\"matchCriteriaId\":\"96D99E49-380D-43AB-BDBA-25C3AD018A9C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.19\",\"versionEndExcluding\":\"7.0.10\",\"matchCriteriaId\":\"A13475D2-59BF-4716-94B5-7C1D239A2CF4\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/0694618cf3e9b120666e31f5f383a6e466d95a0d\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/2195574dc6d9017d32ac346987e12659f931d932\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/26900306a5a2c3e4f75c643a064525526bb6e5f3\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/8def8fbd23f40e945febe913d04b731012ce0082\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/9a05e195618a6d474f2bcd5b6376d0ffc2f00366\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/c55940895245d8ef658ab381248a28755218d625\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/cb833bbc1b3c51e08652d3c86298307c07d3f2db\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/fb965b1cfe92b28d28b5ebe3116b81dbef9f2d2f\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/html/ssa-019113.html\",\"source\":\"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-06-28T05:47:50+00:00",
      "cve": "CVE-2026-45841",
      "id": "CVE-2026-45841",
      "initial_release_date": "2026-05-27T00:00:00+00:00",
      "product_status:known_affected": "184",
      "product_status:known_not_affected": "90",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45841.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-11T01:14:59Z",
      "cve": "CVE-2026-45841",
      "id": "CVE-2026-45841",
      "initial_release_date": "2026-05-27T12:57:24Z",
      "product_status:first_fixed": "2",
      "product_status:known_affected": "643",
      "product_status:recommended": "320",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-45841",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-45841.json",
      "version": "18"
    }
  }
}

SUSE-SU-2026:22436-1

Vulnerability from csaf_suse - Published: 2026-06-30 23:09 - Updated: 2026-06-30 23:09

Summary

Security update for the Linux Kernel

Severity

Important

Scope

71 vulnerabilities in this advisory, including CVE-2026-45841.

CVE-2026-45841

5.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Recommended: 11 products

Open the full advisory

SUSE-SU-2026:22458-1

Vulnerability from csaf_suse - Published: 2026-06-30 11:07 - Updated: 2026-06-30 11:07

Summary

Security update for the Linux Kernel

Severity

Important

Scope

169 vulnerabilities in this advisory, including CVE-2026-45841.

CVE-2026-45841

5.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Recommended: 7 products

Open the full advisory

SUSE-SU-2026:22460-1

Vulnerability from csaf_suse - Published: 2026-06-30 16:55 - Updated: 2026-06-30 16:55

Summary

Security update for the Linux Kernel

Severity

Important

Scope

71 vulnerabilities in this advisory, including CVE-2026-45841.

CVE-2026-45841

5.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Recommended: 17 products

Open the full advisory

SUSE-SU-2026:2450-1

Vulnerability from csaf_suse - Published: 2026-06-18 13:36 - Updated: 2026-06-18 13:36

Summary

Security update for the Linux Kernel

Severity

Important

Scope

84 vulnerabilities in this advisory, including CVE-2026-45841.

CVE-2026-45841

5.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Recommended: 92 products

Open the full advisory

SUSE-SU-2026:2799-1

Vulnerability from csaf_suse - Published: 2026-07-08 14:58 - Updated: 2026-07-08 14:58

Summary

Security update for the Linux Kernel

Severity

Important

Scope

168 vulnerabilities in this advisory, including CVE-2026-45841.

CVE-2026-45841

5.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Recommended: 19 products

Open the full advisory

ubuntu-cve-2026-45841

Vulnerability from osv_ubuntu

Published

2026-05-27 11:16

Modified

2026-09-09 12:03

Summary

Details

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO nf_osf_match_one() computes ctx->window % f->wss.val in the OSF_WSS_MODULO branch with no guard for f->wss.val == 0. A CAP_NET_ADMIN user can add such a fingerprint via nfnetlink; a subsequent matching TCP SYN divides by zero and panics the kernel. Reject the bogus fingerprint in nfnl_osf_add_callback() above the per-option for-loop. f->wss is per-fingerprint, not per-option, so the check must run regardless of f->opt_num (including 0). Also reject wss.wc >= OSF_WSS_MAX; nf_osf_match_one() already treats that as "should not happen". Crash: Oops: divide error: 0000 [#1] SMP KASAN NOPTI RIP: 0010:nf_osf_match_one (net/netfilter/nfnetlink_osf.c:98) Call Trace: nf_osf_match (net/netfilter/nfnetlink_osf.c:220) xt_osf_match_packet (net/netfilter/xt_osf.c:32) ipt_do_table (net/ipv4/netfilter/ip_tables.c:348) nf_hook_slow (net/netfilter/core.c:622) ip_local_deliver (net/ipv4/ip_input.c:265) ip_rcv (include/linux/skbuff.h:1162) __netif_receive_skb_one_core (net/core/dev.c:6181) process_backlog (net/core/dev.c:6642) __napi_poll (net/core/dev.c:7710) net_rx_action (net/core/dev.c:7945) handle_softirqs (kernel/softirq.c:622)

Severity

5.5 (Medium)


                    
                      CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

N/A (UNKNOWN)

low

References

URL

Type

	https://ubuntu.com/security/CVE-2026-45841	REPORT
	https://www.cve.org/CVERecord?id=CVE-2026-45841	REPORT
	https://git.kernel.org/linus/2195574dc6d9017d32ac…	REPORT
	https://ubuntu.com/security/notices/USN-8566-1	ADVISORY
	https://ubuntu.com/security/notices/USN-8568-1	ADVISORY
	https://ubuntu.com/security/notices/USN-8569-1	ADVISORY
	https://ubuntu.com/security/notices/USN-8567-1	ADVISORY
	https://ubuntu.com/security/notices/USN-8574-1	ADVISORY
	https://ubuntu.com/security/notices/USN-8575-1	ADVISORY
	https://ubuntu.com/security/notices/USN-8576-1	ADVISORY
	https://ubuntu.com/security/notices/USN-8593-1	ADVISORY
	https://ubuntu.com/security/notices/USN-8574-2	ADVISORY
	https://ubuntu.com/security/notices/USN-8595-1	ADVISORY
	https://ubuntu.com/security/notices/USN-8596-1	ADVISORY
	https://ubuntu.com/security/notices/USN-8575-2	ADVISORY
	https://ubuntu.com/security/notices/USN-8576-2	ADVISORY
	https://ubuntu.com/security/notices/USN-8603-1	ADVISORY
	https://ubuntu.com/security/notices/USN-8595-2	ADVISORY
	https://ubuntu.com/security/notices/USN-8606-1	ADVISORY
	https://ubuntu.com/security/notices/USN-8607-1	ADVISORY
	https://ubuntu.com/security/notices/USN-8608-1	ADVISORY
	https://ubuntu.com/security/notices/USN-8609-1	ADVISORY
	https://ubuntu.com/security/notices/USN-8575-3	ADVISORY
	https://ubuntu.com/security/notices/USN-8610-1	ADVISORY
	https://ubuntu.com/security/notices/USN-8618-1	ADVISORY
	https://ubuntu.com/security/notices/USN-8574-3	ADVISORY
	https://ubuntu.com/security/notices/USN-8595-3	ADVISORY
	https://ubuntu.com/security/notices/USN-8619-1	ADVISORY
	https://ubuntu.com/security/notices/USN-8620-1	ADVISORY
	https://ubuntu.com/security/notices/USN-8620-2	ADVISORY
	https://ubuntu.com/security/notices/USN-8620-3	ADVISORY
	https://ubuntu.com/security/notices/USN-8620-4	ADVISORY
	https://ubuntu.com/security/notices/USN-8663-1	ADVISORY
	https://ubuntu.com/security/notices/USN-8664-1	ADVISORY
	https://ubuntu.com/security/notices/USN-8665-1	ADVISORY
	https://ubuntu.com/security/notices/USN-8668-1	ADVISORY
	https://ubuntu.com/security/notices/USN-8728-1	ADVISORY

JSON

To clipboard

Loading 1.0 MB of JSON…

WID-SEC-W-2026-1691

Vulnerability from csaf_certbund - Published: 2026-05-26 22:00 - Updated: 2026-06-16 22:00

Summary

Linux Kernel: Mehrere Schwachstellen

Severity

Hoch

Scope

10 vulnerabilities in this advisory, including CVE-2026-45841.

CVE-2026-45841

Known affected: 3 products

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

CVE-2026-45841 (GCVE-0-2026-45841)

SUSE-SU-2026:22436-1

SUSE-SU-2026:22458-1

SUSE-SU-2026:22460-1

SUSE-SU-2026:2450-1

SUSE-SU-2026:2799-1

ubuntu-cve-2026-45841

Vulnerability from osv_ubuntu

WID-SEC-W-2026-1691

Tags

Sightings

Nomenclature