Exploit Total
ExploreInsightsHow it worksContact us
bySign in

© 2026 Anyday Security

FAQPrivacy PolicyTerms of Use

Product names, logos and brands are property of their respective owners. They are used here for identification only and imply no affiliation or endorsement.

ExploreInsightsHow it worksContact us
Back
Vulnerability ID

CVE-2026-52986

Out-of-bounds read in netfilter/nf_conntrack_sip

ProductLinux kernel
CVSS 3.1Critical9.8
EPSS0.63%
Has public PoCNo
AI Exploitability

No working AI exploit yet

Working AI PoC
Not yet
Cheapest run
$48.58
Fastest run
—
Model MatrixCapability BreakdownVulnerability DetailsTimelineCommunity
Sign in
Model MatrixCapability BreakdownVulnerability DetailsTimelineCommunity

Overview

View on NVD

netfilter: nf_conntrack_sip: don't use simple_strtoul Replace unsafe port parsing in epaddr_len(), ct_sip_parse_header_uri(), and ct_sip_parse_request() with a new sip_parse_port() helper that validates each digit against the buffer limit, eliminating the use of simple_strtoul() which assumes NUL-terminated strings.

CWE
CWE-476
Weakness
NULL Pointer Dereference
Component
netfilter/nf_conntrack_sip
Impact
Not stated
Published
2026-06-24
Fixed version
7.1

Risk factors

In-the-WildNot observed
CISA KEVNot listed
Public ExploitNone known
Ransomware useNone known

Severity

CVSS 3.1Only version published

9.8Critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability
Attack VectorNetwork
ComplexityLow
Privileges RequiredNone
User InteractionNone
Impact
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh

EPSS

Chance of exploitation in the next 30 days

0.63%

SSVC

Stakeholder-specific vulnerability categorization

Not scored. CISA publishes an SSVC decision for a subset of CVEs.