Out-of-bounds read in Linux kernel - CVE-2026-52942
Published: June 25, 2026
Vulnerability identifier: #VU135439
CSH Severity: Low
CVSS v4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2026-52942
CWE-ID: CWE-125
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vendor: Linux Foundation
Affected software:
Linux kernel
Linux kernel
Detailed vulnerability description
The vulnerability allows a local user to disclose sensitive information.
The vulnerability exists due to an out-of-bounds read in dump_mac_header() in the netfilter nf_log syslog logger when processing an skb sent through AF_PACKET with PACKET_QDISC_BYPASS and an unset MAC header. A local user can send a specially crafted packet to disclose sensitive information.
Only skbs with an unset MAC header are affected.
How to mitigate CVE-2026-52942
Install security update from vendor's repository.
Sources
- https://git.kernel.org/stable/c/65ef7397eb9a296e91839f5fd10be96f23d332e7
- https://git.kernel.org/stable/c/8a81e336da685423f5b64aac4d571e63d674c52a
- https://git.kernel.org/stable/c/a84b6fedbc97078788be78dbdd7517d143ad1a77
- https://git.kernel.org/stable/c/af1b7699466f6556b351fa25d3dc870abfb5d310
- https://git.kernel.org/stable/c/befb8968a2abdfa948d5600ea7f7a509a292a590
- https://git.kernel.org/stable/c/c38d41134085193efd5b237cf513ad5b3421a60d
- https://git.kernel.org/stable/c/d704ee9c7bc68a161684c51a7ac05b446dcf38d4