CVE-2026-52927

A flaw was found in the Linux kernel's netfilter ebtables component. The compat_mtw_from_user function, responsible for converting ebtables extensions, does not properly validate user-supplied sizes for match or target extensions. An attacker providing a size smaller than expected by an extension can cause the kernel to perform an out-of-bounds read, potentially leading to information disclosure or a denial of service (DoS).

This vulnerability is rated as Moderate severity for Red Hat Enterprise Linux because exploitation requires local access and the capability to configure network bridge filtering rules via 32-bit compatibility interfaces. A successful exploit depends on elevated network administration privileges or unprivileged user namespaces to invoke 32-bit bridge table configuration requests. Consequently, the blast radius is confined to a local kernel crash causing a denial of service or minor memory disclosure, precluding remote reachability or host takeover.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.