01 Record

CVE-2026-23456

netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case

HighPUBLISHEDCNA: Linux

CNA base score8.2 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

View raw JSON

02 Description

netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.52% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 42.4% of scored records. A rank, not a probability.
NVD base score: 8.2 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-07-24.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-04-03 15:15Z5 MO AGO

Last updated

2026-08-05 12:21Z1 MO AGO

Reserved

2026-01-13

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 8.2)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Weaknesses

CWE-125Out-of-bounds ReadBase

Data version

5.2

Document digest

04157d2e47f2935b27a133a8e2762ad0cfef226d7d1a0ea32ea2c61a9c7dfb20

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux5e35941d990123f155b02d5663e51a24f816b6f3 to < a2cd54b9348e485d338b3c132338a4410c99afaf, 5e35941d990123f155b02d5663e51a24f816b6f3 to < c95dc674ebf01ecfb40388b6facfc89b81fed3b7, 5e35941d990123f155b02d5663e51a24f816b6f3 to < 41b417ff73a24b2c68134992cc44c88db27f482d, 5e35941d990123f155b02d5663e51a24f816b6f3 to < 52235bf88159a1ef16434ab49e47e99c8a09ab20, 5e35941d990123f155b02d5663e51a24f816b6f3 to < 774a434f8c9c8602a976b2536f65d0172a07f4d2, 5e35941d990123f155b02d5663e51a24f816b6f3 to < 6bce72daeccca9aa1746e92d6c3d4784e71f2ebb, 5e35941d990123f155b02d5663e51a24f816b6f3 to < fb6c3596823ec5dd09c2123340330d7448f51a59, 5e35941d990123f155b02d5663e51a24f816b6f3 to < 1e3a3593162c96e8a8de48b1e14f60c3b57fca8a, 2.6.17—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/a2cd54b9348e485d338b3c132338a4410c99afaf
git.kernel.orghttps://git.kernel.org/stable/c/c95dc674ebf01ecfb40388b6facfc89b81fed3b7
git.kernel.orghttps://git.kernel.org/stable/c/41b417ff73a24b2c68134992cc44c88db27f482d
git.kernel.orghttps://git.kernel.org/stable/c/52235bf88159a1ef16434ab49e47e99c8a09ab20
git.kernel.orghttps://git.kernel.org/stable/c/774a434f8c9c8602a976b2536f65d0172a07f4d2
git.kernel.orghttps://git.kernel.org/stable/c/6bce72daeccca9aa1746e92d6c3d4784e71f2ebb
git.kernel.orghttps://git.kernel.org/stable/c/fb6c3596823ec5dd09c2123340330d7448f51a59
git.kernel.orghttps://git.kernel.org/stable/c/1e3a3593162c96e8a8de48b1e14f60c3b57fca8a
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-082556.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-019113.html

01 Record index

CVE-2026-23456

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2026-23456

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References