ZDI-26-193 LOW 3.8 Published Mar 16, 2026

Linux Kernel nf_tables_newset Out-Of-Bounds Write Information Disclosure Vulnerability

Linux

This vulnerability in the Linux Kernel allows local attackers to read sensitive information on affected systems, but requires them to already have low-privileged code execution capabilities on the target machine. With a CVSS score of 3.8 (low severity), the impact is limited but still represents an information disclosure risk. Security teams should apply Linux Kernel patches when available and ensure proper access controls to prevent unauthorized code execution, though this is not an urgent priority given the low severity rating and high barrier to exploitation.

Related CVE

CVE-2022-1972

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy