U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

CVE-2026-43452 Detail

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: guard option walkers against 1-byte tail reads When the last byte of options is a non-single-byte option kind, walkers that advance with i += op[i + 1] ? : 1 can read op[i + 1] past the end of the option area. Add an explicit i == optlen - 1 check before dereferencing op[i + 1] in xt_tcpudp and xt_dccp option walkers.


Metrics

NVD enrichment efforts reference publicly available information to associate vector strings. CVSS information contributed by other sources is also displayed.
CVSS 4.0 Severity and Vector Strings:

NIST CVSS score
NIST: NVD
N/A
NVD assessment not yet provided.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to [email protected].

URL Source(s) Tag(s)
https://git.kernel.org/stable/c/5b18b8b35c7cded2d17b2b2604c9b0694ff48d1c kernel.org
https://git.kernel.org/stable/c/9b94f0e42ed248eb31929da84ed9f5310d7ff540 kernel.org
https://git.kernel.org/stable/c/ae1e1267650638136b84c23f2b31250f0ccb6823 kernel.org
https://git.kernel.org/stable/c/bc18551c6169eac5ed813778d3e3e484002dbbe5 kernel.org
https://git.kernel.org/stable/c/c2a445367a496a3c25dbc940c10c8bd1cfd4c14a kernel.org
https://git.kernel.org/stable/c/c39f84e4be1be63fc60ca7141ea7b76edcea5907 kernel.org
https://git.kernel.org/stable/c/cfe770220ac2dbd3e104c6b45094037455da81d4 kernel.org
https://git.kernel.org/stable/c/d04800323336eebf441d153f43234eac9b833d36 kernel.org

Weakness Enumeration

CWE-ID CWE Name Source

Change History

2 change records found show changes

Quick Info

CVE Dictionary Entry:
CVE-2026-43452
NVD Published Date:
05/08/2026
NVD Last Modified:
05/12/2026
Source:
kernel.org