The vulnerability of the nf_osf_match_one() function in the net/netfilter/nfnetlink_osf.c module of the netfilter component of the Linux operating system allows a attacker to access protected information or cause a service failure.

The vulnerability of the nfosfmatchone function in the net/netfilter/nfnetlinkosf.c module of the netfilter component of the Linux operating system is related to the issue of operations going beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to access...

EUVD-2026-38867

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlinkosf: fix out-of-bounds read on option matching In nfosfmatch, the nfosfhdrctx structure is initialized once and passed by reference to nfosfmatchone for each fingerprint checked. During TCP option parsing,...

CVE-2026-52999 netfilter: nfnetlink_osf: fix out-of-bounds read on option matching

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlinkosf: fix out-of-bounds read on option matching In nfosfmatch, the nfosfhdrctx structure is initialized once and passed by reference to nfosfmatchone for each fingerprint checked. During TCP option parsing,...

Linux Kernel nftables Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of the Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...