CVE-2026-52942

A flaw was found in the Linux kernel's netfilter logging component. This vulnerability occurs because the system does not properly check if a network packet's Media Access Control (MAC) header is valid before attempting to log it. A local attacker could send a specially crafted network packet, leading to an out-of-bounds read. This could result in the disclosure of sensitive information from kernel memory or cause a system crash, leading to a denial of service.

Red Hat has rated this vulnerability as Moderate because exploitation requires local system access with privileges to craft raw network packets, combined with an uncommon packet logging configuration. In standard Red Hat Enterprise Linux installations, netfilter netdev egress logging is not enabled by default, and raw socket creation requires elevated privileges. Consequently, an attacker can at most cause a local denial of service through a kernel crash or read out-of-bounds kernel memory into logs, without the ability to modify memory or execute arbitrary code.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.