Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-45844

In the Linux kernel, the following vulnerability has been resolved: netfilter: arp_tables: fix IEEE1394 ARP payload parsing Weiming Shi says: "arp_packet_match() unconditionally parses the ARP payload assuming two hardware addresses are present (source and target). However, IPv4-over-IEEE1394 ARP (RFC 2734) omits the target hardware address field, and arp_hdr_len() already accounts for this by returning a shorter length for ARPHRD_IEEE1394 devices. As a result, on IEEE1394 interfaces arp_pac
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:9402cd5400e650518125f2d2c2fff9a5ce5c59db57dce42c2a6d61919f2972ea
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/ipv4/netfilter/arp_tables.c","net/ipv4/netfilter/arpt_mangle.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"0f23a1457695f1a61f64367e39f0f9cfa29947d1","status":"affected","version":"6752c8db8e0cfedb44ba62806dd15b383ed64000","versionType":"git"},{"lessThan":"1e285362ef7096eb12733370d59e033f4a1d294a","status":"affected","version":"6752c8db8e0cfedb44ba62806dd15b383ed64000","versionType":"git"},{"lessThan":"84e8536c981338d0d8cc6e712cf71a936a93e13f","status":"…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:fc4c8c151a80b601bbe28aaf81c3a026a4426fa0c69418c182ab1cf5075fa7bd · sha256:1ba8efef75da9313… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["net/ipv4/netfilter/arp_tables.c","net/ipv4/netfilter/arpt_mangle.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.10"},{"lessThan":"3.10","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:fc4c8c151a80b601bbe28aaf81c3a026a4426fa0c69418c182ab1cf5075fa7bd · sha256:1ba8efef75da9313… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/ipv4/netfilter/arp_tables.c","net/ipv4/netfilter/arpt_mangle.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"0f23a1457695f1a61f64367e39f0f9cfa29947d1","status":"affected","version":"6752c8db8e0cfedb44ba62806dd15b383ed64000","versionType":"git"},{"lessThan":"1e285362ef7096eb12733370d59e033f4a1d294a","status":"affected","version":"6752c8db8e0cfedb44ba62806dd15b383ed64000","versionType":"git"},{"lessThan":"84e8536c981338d0d8cc6e712cf71a936a93e13f","status":"…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:fc4c8c151a80b601bbe28aaf81c3a026a4426fa0c69418c182ab1cf5075fa7bd · sha256:1ba8efef75da9313… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["net/ipv4/netfilter/arp_tables.c","net/ipv4/netfilter/arpt_mangle.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.10"},{"lessThan":"3.10","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:fc4c8c151a80b601bbe28aaf81c3a026a4426fa0c69418c182ab1cf5075fa7bd · sha256:1ba8efef75da9313… · /containers/cna/affected/1

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/03ea11dbefaa55c502735ee551c89ef773fe753b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:fc4c8c151a80b601bbe28aaf81c3a026a4426fa0c69418c182ab1cf5075fa7bd · sha256:1ba8efef75da9313… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/0f23a1457695f1a61f64367e39f0f9cfa29947d1"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:fc4c8c151a80b601bbe28aaf81c3a026a4426fa0c69418c182ab1cf5075fa7bd · sha256:1ba8efef75da9313… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/1c55053f8ffdc060006df898fd3664e3d1bfac7b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:fc4c8c151a80b601bbe28aaf81c3a026a4426fa0c69418c182ab1cf5075fa7bd · sha256:1ba8efef75da9313… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/1e285362ef7096eb12733370d59e033f4a1d294a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:fc4c8c151a80b601bbe28aaf81c3a026a4426fa0c69418c182ab1cf5075fa7bd · sha256:1ba8efef75da9313… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/1e8e3f449b1e73b73a843257635b9c50f0cc0f0a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:fc4c8c151a80b601bbe28aaf81c3a026a4426fa0c69418c182ab1cf5075fa7bd · sha256:1ba8efef75da9313… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/84e8536c981338d0d8cc6e712cf71a936a93e13f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:fc4c8c151a80b601bbe28aaf81c3a026a4426fa0c69418c182ab1cf5075fa7bd · sha256:1ba8efef75da9313… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/ac698d81fd6619c7504cee913f1cab5285fba1b7"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:fc4c8c151a80b601bbe28aaf81c3a026a4426fa0c69418c182ab1cf5075fa7bd · sha256:1ba8efef75da9313… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/ad9973df8e0eeb123d9ec4d18828e05b7d44ff4b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:fc4c8c151a80b601bbe28aaf81c3a026a4426fa0c69418c182ab1cf5075fa7bd · sha256:1ba8efef75da9313… · /containers/cna/references/3

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer