CVE-2026-52915

CVE-2026-52915 relates to Linux kernel netfilter ip6t_hbh handling. The issue arises because struct ip6t_opts has a fixed opts[IP6T_OPTS_OPTSNR] array (IPT_OPTS_OPTSNR = 16) and hbh_mt6_check() did not reject larger optsnr values from userspace, enabling an off-by-one array access. The patch vali...