CVE-2026-43452: linux Out-of-bounds Read
Vulnerability summary
CVE-2026-43452 is a high (CVSS 8.2) Out-of-bounds Read vulnerability in linux. EPSS estimates a 0.63% chance of exploitation in the next 30 days, higher than 49.6% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 39 · Related 39Timeline
- 08-05-2026PublishedVulnerability first disclosed.
- 19-10-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: guard option walkers against 1-byte tail reads When the last byte of options is a non-single-byte option kind, walkers that advance with i += op[i + 1] ? : 1 can read op[i + 1] past the end of the option area. Add an explicit i == optlen - 1 check before dereferencing op[i + 1] in xt_tcpudp and xt_dccp option walkers.
CVSS metrics
4 scores · 4 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated8.2HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
- OSV · DebianEcosystem advisory · calculated8.2HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
- NVDNIST8.2HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
EPSS trend
Probability
0.63%
Chance of exploitation in the next 30 days
Percentile
50%
Versus all other CVEs
30-day change
+0.19 pp
From 0.44% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu157 products
- linuxAll versions (No fix recorded) | < 5.15.0-186.196 | < 6.8.0-136.136
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded) | < 5.15.0-1112.119 | < 6.8.0-1061.64
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ 2e4e6a17af35be359cc8f1c924f8f198fbd478cc, < c2a445367a496a3c25dbc940c10c8bd1cfd4c14a | ≥ 2e4e6a17af35be359cc8f1c924f8f198fbd478cc, < ae1e1267650638136b84c23f2b31250f0ccb6823 | ≥ 2e4e6a17af35be359cc8f1c924f8f198fbd478cc, < c39f84e4be1be63fc60ca7141ea7b76edcea5907 | ≥ 2e4e6a17af35be359cc8f1c924f8f198fbd478cc, < 9b94f0e42ed248eb31929da84ed9f5310d7ff540 | ≥ 2e4e6a17af35be359cc8f1c924f8f198fbd478cc, < 5b18b8b35c7cded2d17b2b2604c9b0694ff48d1c | ≥ 2e4e6a17af35be359cc8f1c924f8f198fbd478cc, < bc18551c6169eac5ed813778d3e3e484002dbbe5 | ≥ 2e4e6a17af35be359cc8f1c924f8f198fbd478cc, < d04800323336eebf441d153f43234eac9b833d36 | ≥ 2e4e6a17af35be359cc8f1c924f8f198fbd478cc, < cfe770220ac2dbd3e104c6b45094037455da81d4 | 2.6.16
- linux_kernel≥ 2.6.16, < 5.10.253 | ≥ 5.11, < 5.15.203 | ≥ 5.16, < 6.1.167 | ≥ 6.2, < 6.6.130 | ≥ 6.7, < 6.12.78 | ≥ 6.13, < 6.18.19 | ≥ 6.19, < 6.19.9 | 7.0:rc1 | 7.0:rc2 | 7.0:rc3
Debian1 product
- linux< 6.1.170-1 | < 6.12.85-1 | < 6.19.10-1
3 vendors · 160 products
