Out-of-Bounds Read Vulnerability in Linux Kernel Netfilter ebtables

CVE-2026-52927

What is CVE-2026-52927?

A vulnerability in the Linux kernel's netfilter component involves the compat_mtw_from_user() function, which improperly handles user-supplied match_size and target_size during ebtables extension conversions. This may lead to out-of-bounds reads if size requirements are not met. The issue arises when kernel memory access is based on user-defined sizes, potentially allowing unauthorized memory reads. A recent fix has been implemented to enforce proper size validation, ensuring that match_size is sufficiently large according to the extension's requirements. This enhancement aims to protect against unintended memory access while maintaining compatibility across standard targets.

References