CVE-2026-43190
MediumSummary
A vulnerability has been identified in the Linux kernel's netfilter module related to the TCP option parser. The issue arises from the lack of validation of the remaining option length before reading, which could lead to unexpected behavior.
Risk Assessment
The lack of proper validation may allow attackers to exploit this vulnerability to execute unauthorized code or destabilize the system. Organizations should be aware of the potential security risks.
Recommendation
It is recommended to update the Linux kernel to the latest version where this vulnerability has been fixed. Regular monitoring and applying security patches is crucial.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_tcpmss: check remaining length before reading optlen Quoting reporter: In net/netfilter/xt_tcpmss.c (lines 53-68), the TCP option parser reads op[i+1] directly without validating the remaining option length. If