CVE-2026-43233
MediumSummary
A vulnerability in the Linux kernel has been fixed that allowed for out-of-bounds read in the decode_choice() function. The issue stemmed from improper boundary checking before calling get_len(), which could lead to unexpected behavior.
Risk Assessment
Organizations may be exposed to attacks that exploit this vulnerability to read memory outside of allowed boundaries, potentially leading to the disclosure of sensitive information.
Recommendation
It is recommended to update the Linux kernel to the latest version to mitigate this vulnerability and to conduct a security audit of systems using the affected kernel version.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() In decode_choice(), the boundary check before get_len() uses the variable `len`, which is still 0 from its initialization at the top of the function: unsigned int