Buffer Overflow in Linux Kernel Netfilter Module for Packet Logging

CVE-2026-52942

What is CVE-2026-52942?

A vulnerability in the Linux kernel's netfilter module affects how MAC headers are validated during packet logging operations. Specifically, the fallback path of the dump_mac_header function does not properly check if the MAC header has been set. This oversight allows access to memory beyond allocated buffers, potentially leading to a buffer overflow condition. The issue arises when packets with an unset MAC header pass through specific logging paths, facilitating the possibility of exploitation through crafted network packets. Implementing a necessary check for MAC header status can mitigate this risk.

References