Answer in brief
CVE-2026-43452 records a Unknown severity vulnerability in netfilter: x_tables: guard option walkers against 1-byte tail reads. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
Answer in brief
CVE-2026-43452 records a Unknown severity vulnerability in netfilter: x_tables: guard option walkers against 1-byte tail reads. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=2e4e6a17af35be359cc8f1c924f8f198fbd478cc <c2a445367a496a3c25dbc940c10c8bd1cfd4c14a || >=2e4e6a17af35be359cc8f1c924f8f198fbd478cc <ae1e1267650638136b84c23f2b31250f0ccb6823 || >=2e4e6a17af35be359cc8f1c924f8f198fbd478cc <c39f84e4be1be63fc60ca7141ea7b76edcea5907 || >=2e4e6a17af35be359cc8f1c924f8f198fbd478cc <9b94f0e42ed248eb31929da84ed9f5310d7ff540 || >=2e4e6a17af35be359cc8f1c924f8f198fbd478cc <5b18b8b35c7cded2d17b2b2604c9b0694ff48d1c || >=2e4e6a17af35be359cc8f1c924f8f198fbd478cc <bc18551c6169eac5ed813778d3e3e484002dbbe5 || >=2e4e6a17af35be359cc8f1c924f8f198fbd478cc <d04800323336eebf441d153f43234eac9b833d36 || >=2e4e6a17af35be359cc8f1c924f8f198fbd478cc <cfe770220ac2dbd3e104c6b45094037455da81d4 | c2a445367a496a3c25dbc940c10c8bd1cfd4c14a, ae1e1267650638136b84c23f2b31250f0ccb6823, c39f84e4be1be63fc60ca7141ea7b76edcea5907, 9b94f0e42ed248eb31929da84ed9f5310d7ff540, 5b18b8b35c7cded2d17b2b2604c9b0694ff48d1c, bc18551c6169eac5ed813778d3e3e484002dbbe5, d04800323336eebf441d153f43234eac9b833d36, cfe770220ac2dbd3e104c6b45094037455da81d4 |
| Linux/Linuxgeneric | 2.6.16 | Not reported |
Published upstream
May 8, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: guard option walkers against 1-byte tail reads When the last byte of options is a non-single-byte option kind, walkers that advance with i += op[i + 1] ? : 1 can read op[i + 1] past the end of the option area. Add an explicit i == optlen - 1 check before dereferencing op[i + 1] in xt_tcpudp and xt_dccp option walkers.
Quoted source text, attributed separately from HOL analysis.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=2e4e6a17af35be359cc8f1c924f8f198fbd478cc <c2a445367a496a3c25dbc940c10c8bd1cfd4c14a || >=2e4e6a17af35be359cc8f1c924f8f198fbd478cc <ae1e1267650638136b84c23f2b31250f0ccb6823 || >=2e4e6a17af35be359cc8f1c924f8f198fbd478cc <c39f84e4be1be63fc60ca7141ea7b76edcea5907 || >=2e4e6a17af35be359cc8f1c924f8f198fbd478cc <9b94f0e42ed248eb31929da84ed9f5310d7ff540 || >=2e4e6a17af35be359cc8f1c924f8f198fbd478cc <5b18b8b35c7cded2d17b2b2604c9b0694ff48d1c || >=2e4e6a17af35be359cc8f1c924f8f198fbd478cc <bc18551c6169eac5ed813778d3e3e484002dbbe5 || >=2e4e6a17af35be359cc8f1c924f8f198fbd478cc <d04800323336eebf441d153f43234eac9b833d36 || >=2e4e6a17af35be359cc8f1c924f8f198fbd478cc <cfe770220ac2dbd3e104c6b45094037455da81d4 | c2a445367a496a3c25dbc940c10c8bd1cfd4c14a, ae1e1267650638136b84c23f2b31250f0ccb6823, c39f84e4be1be63fc60ca7141ea7b76edcea5907, 9b94f0e42ed248eb31929da84ed9f5310d7ff540, 5b18b8b35c7cded2d17b2b2604c9b0694ff48d1c, bc18551c6169eac5ed813778d3e3e484002dbbe5, d04800323336eebf441d153f43234eac9b833d36, cfe770220ac2dbd3e104c6b45094037455da81d4 |
| Linux/Linuxgeneric | 2.6.16 | Not reported |
Published upstream
May 8, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: guard option walkers against 1-byte tail reads When the last byte of options is a non-single-byte option kind, walkers that advance with i += op[i + 1] ? : 1 can read op[i + 1] past the end of the option area. Add an explicit i == optlen - 1 check before dereferencing op[i + 1] in xt_tcpudp and xt_dccp option walkers.
Quoted source text, attributed separately from HOL analysis.