SB20260625251 - Out-of-bounds read in Linux kernel netfilter
Published: June 25, 2026
Security Bulletin ID
SB20260625251
CSH Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Information disclosure
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 vulnerability.
1) Out-of-bounds read (CVE-ID: CVE-2026-52942)
CWE-ID: CWE-125 - Out-of-bounds read
CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear
The vulnerability allows a local user to disclose sensitive information.
The vulnerability exists due to an out-of-bounds read in dump_mac_header() in the netfilter nf_log syslog logger when processing an skb sent through AF_PACKET with PACKET_QDISC_BYPASS and an unset MAC header. A local user can send a specially crafted packet to disclose sensitive information.
Only skbs with an unset MAC header are affected.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/65ef7397eb9a296e91839f5fd10be96f23d332e7
- https://git.kernel.org/stable/c/8a81e336da685423f5b64aac4d571e63d674c52a
- https://git.kernel.org/stable/c/a84b6fedbc97078788be78dbdd7517d143ad1a77
- https://git.kernel.org/stable/c/af1b7699466f6556b351fa25d3dc870abfb5d310
- https://git.kernel.org/stable/c/befb8968a2abdfa948d5600ea7f7a509a292a590
- https://git.kernel.org/stable/c/c38d41134085193efd5b237cf513ad5b3421a60d
- https://git.kernel.org/stable/c/d704ee9c7bc68a161684c51a7ac05b446dcf38d4