The vulnerability of the hbh_mt6_check() function in the net/ipv6/netfilter/ip6t_hbh.c module of the Linux operating system’s IPv6 kernel implementation allows a attacker to access protected information or cause a service failure.

The vulnerability of the hbhmt6check function in the net/ipv6/netfilter/ip6thbh.c module of the Linux operating system’s IPv6 kernel implementation is related to the execution of operations outside of the buffer memory. Exploiting this vulnerability could allow an attacker to access protected...

CVE-2026-52915: Improper Validation of Array Index

In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6thbh: reject oversized option lists struct ip6topts stores at most IP6TOPTSOPTSNR option descriptors, but hbhmt6check does not reject larger optsnr values supplied from userspace. Validate optsnr in the rule setup...