CVE-2026-45843 slip: bound decode() reads against the compressed packet length

🗓️ 27 May 2026 09:24:45Reported by LinuxType

Linux slip decode() checks end and returns -1 when exhausted to fix over-read CVE-2026-45843.

Reporter	Title	Published	Views	Family All 235
ATTACKERKB	CVE-2026-45843	27 May 202609:24	–	attackerkb
Circl	CVE-2026-45843	27 May 202613:13	–	circl
CNNVD	Linux kernel 安全漏洞	27 May 202600:00	–	cnnvd
CVE	CVE-2026-45843	27 May 202609:24	–	cve
Debian CVE	CVE-2026-45843	27 May 202609:24	–	debiancve
EUVD	EUVD-2026-32169	27 May 202609:24	–	euvd
Microsoft CVE	slip: bound decode() reads against the compressed packet length	28 May 202608:11	–	mscve
NVD	CVE-2026-45843	27 May 202611:16	–	nvd
Tenable Nessus	openSUSE 16 Security Update : kernel (openSUSE-SU-2026:20912-1)	11 Jun 202600:00	–	nessus
Tenable Nessus	Photon OS 4.0: Linux PHSA-2026-4.0-1028	5 Jun 202600:00	–	nessus

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/net/slip/slhc.c"
    ],
    "versions": [
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "6268f01ae989013671b526c883e92655342c6f6f",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "9aafba2f49e1fcccc2018816f5836a609c925879",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "335957df4ed60f02a2ec0432fbedbf0cc7241d8b",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "37537e42e6df387398bee85cb85070cc80bb1e10",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "4cefe32639933d652614b0bd50f818f9af4af78f",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "0511ecb00e61bf28e2fec4bb41fcce385c3a3b2d",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "d42bec6e4f6d6d658be365539400b3314b76b2a7",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "4c1367a2d7aad643a6f87c6931b13cc1a25e8ca7",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/net/slip/slhc.c"
    ],
    "versions": [
      {
        "version": "2.6.12",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "2.6.12",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.258",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.209",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.175",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.141",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.91",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.33",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.0.10",
        "lessThanOrEqual": "7.0.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.1",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/335957df4ed60f02a2ec0432fbedbf0cc7241d8b
git	www.git.kernel.org/stable/c/6268f01ae989013671b526c883e92655342c6f6f
git	www.git.kernel.org/stable/c/4c1367a2d7aad643a6f87c6931b13cc1a25e8ca7
git	www.git.kernel.org/stable/c/0511ecb00e61bf28e2fec4bb41fcce385c3a3b2d
git	www.git.kernel.org/stable/c/4cefe32639933d652614b0bd50f818f9af4af78f
git	www.git.kernel.org/stable/c/d42bec6e4f6d6d658be365539400b3314b76b2a7
git	www.git.kernel.org/stable/c/9aafba2f49e1fcccc2018816f5836a609c925879
git	www.git.kernel.org/stable/c/37537e42e6df387398bee85cb85070cc80bb1e10

14 Jun 2026 17:46Current

CVSS 3.18.2

EPSS0.00278