Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-43453

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() pipapo_drop() passes rulemap[i + 1].n to pipapo_unmap() as the to_offset argument on every iteration, including the last one where i == m->field_count - 1. This reads one element past the end of the stack-allocated rulemap array (declared as rulemap[NFT_PIPAPO_MAX_FIELDS] with NFT_PIPAPO_MAX_FIELDS == 16). Although pipapo_unmap() returns early when is_la
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:8529d9cea0cf520a09c46734671ae6929a14ea01481a00a948e7544c9eb466ae
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["net/netfilter/nft_set_pipapo.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.6"},{"lessThan":"5.6","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.253","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.203","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.167","versionType":"semver"},{"…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:5b8f35dcc1455e8202d54fbea19133fa24e39fc8ad6ebe512a025c027de3dda5 · sha256:38c14354ea9218d7… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/netfilter/nft_set_pipapo.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"1957e793196e7f8557374fd4eda53abcbb42e1c0","status":"affected","version":"3c4287f62044a90e73a561aa05fc46e62da173da","versionType":"git"},{"lessThan":"57fb87ca095d5127cd7a27583b8ec43dcf7c9e9e","status":"affected","version":"3c4287f62044a90e73a561aa05fc46e62da173da","versionType":"git"},{"lessThan":"60c1d18781e37bfb96290b86510eb01c5fa24d75","status":"affected","version":"3c4287f62044a90…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:5b8f35dcc1455e8202d54fbea19133fa24e39fc8ad6ebe512a025c027de3dda5 · sha256:38c14354ea9218d7… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["net/netfilter/nft_set_pipapo.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.6"},{"lessThan":"5.6","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.253","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.203","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.167","versionType":"semver"},{"…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:5b8f35dcc1455e8202d54fbea19133fa24e39fc8ad6ebe512a025c027de3dda5 · sha256:38c14354ea9218d7… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/netfilter/nft_set_pipapo.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"1957e793196e7f8557374fd4eda53abcbb42e1c0","status":"affected","version":"3c4287f62044a90e73a561aa05fc46e62da173da","versionType":"git"},{"lessThan":"57fb87ca095d5127cd7a27583b8ec43dcf7c9e9e","status":"affected","version":"3c4287f62044a90e73a561aa05fc46e62da173da","versionType":"git"},{"lessThan":"60c1d18781e37bfb96290b86510eb01c5fa24d75","status":"affected","version":"3c4287f62044a90…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:5b8f35dcc1455e8202d54fbea19133fa24e39fc8ad6ebe512a025c027de3dda5 · sha256:38c14354ea9218d7… · /containers/cna/affected/0

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/0a55d62cdb628923d8a21724374a70c76ac7d19d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:5b8f35dcc1455e8202d54fbea19133fa24e39fc8ad6ebe512a025c027de3dda5 · sha256:38c14354ea9218d7… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/1957e793196e7f8557374fd4eda53abcbb42e1c0"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:5b8f35dcc1455e8202d54fbea19133fa24e39fc8ad6ebe512a025c027de3dda5 · sha256:38c14354ea9218d7… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/324b749aa5b2d516ccfab933df9d3f56e7807f5f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:5b8f35dcc1455e8202d54fbea19133fa24e39fc8ad6ebe512a025c027de3dda5 · sha256:38c14354ea9218d7… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/57fb87ca095d5127cd7a27583b8ec43dcf7c9e9e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:5b8f35dcc1455e8202d54fbea19133fa24e39fc8ad6ebe512a025c027de3dda5 · sha256:38c14354ea9218d7… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/60c1d18781e37bfb96290b86510eb01c5fa24d75"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:5b8f35dcc1455e8202d54fbea19133fa24e39fc8ad6ebe512a025c027de3dda5 · sha256:38c14354ea9218d7… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/d6d8cd2db236a9dd13dbc2d05843b3445cc964b5"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:5b8f35dcc1455e8202d54fbea19133fa24e39fc8ad6ebe512a025c027de3dda5 · sha256:38c14354ea9218d7… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/dfbdac719198778b581bc0dd055df2542edb8c62"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:5b8f35dcc1455e8202d54fbea19133fa24e39fc8ad6ebe512a025c027de3dda5 · sha256:38c14354ea9218d7… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/e047f6fbb975f685d6c9fcef95b3b7787a79b46d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:5b8f35dcc1455e8202d54fbea19133fa24e39fc8ad6ebe512a025c027de3dda5 · sha256:38c14354ea9218d7… · /containers/cna/references/5

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer