Linux Kernel Vulnerability in Netfilter Affects Option Walkers

CVE-2026-43452

What is CVE-2026-43452?

A vulnerability exists within the Linux kernel's netfilter component where option walkers can process data in an unsafe manner. Specifically, when handling the last byte of options, the system may erroneously read beyond the intended buffer length, leading to potential data exposure or corruption. To mitigate this risk, an explicit range check has been implemented to prevent out-of-bounds reading, ensuring that access to memory is properly validated before dereferencing pointers.

References