{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2026-52998",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2026-52998",
    "idYear": 2026,
    "status": "PUBLISHED",
    "publishedAt": "2026-06-24T16:29:10.874Z",
    "updatedAt": "2026-10-19T19:47:12.693Z",
    "importedAt": "2026-10-24T01:58:14.884Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": "netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check",
      "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nfnetlink_osf: fix potential NULL dereference in ttl check\n\nThe nf_osf_ttl() function accessed skb->dev to perform a local interface\naddress lookup without verifying that the device pointer was valid.\n\nAdditionally, the implementation utilized an in_dev_for_each_ifa_rcu\nloop to match the packet source address against local interface\naddresses. It assumed that packets from the same subnet should not see a\ndecrement on the initial TTL. A packet might appear it is from the same\nsubnet but it actually isn't especially in modern environments with\ncontainers and virtual switching.\n\nRemove the device dereference and interface loop. Replace the logic with\na switch statement that evaluates the TTL according to the ttl_check.",
      "affected": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "11eeef41d5f63c7d2f7fdfcc733eb7fb137cc384",
              "status": "affected",
              "versionType": "git",
              "lessThan": "f4de0777e4554a7de19c920accde6319dd530782"
            },
            {
              "version": "11eeef41d5f63c7d2f7fdfcc733eb7fb137cc384",
              "status": "affected",
              "versionType": "git",
              "lessThan": "c996a90f3071cf43683e5423da31aadbe002b8b4"
            },
            {
              "version": "11eeef41d5f63c7d2f7fdfcc733eb7fb137cc384",
              "status": "affected",
              "versionType": "git",
              "lessThan": "edc806f9122961f0d3819f7c69c14cccde31f277"
            },
            {
              "version": "11eeef41d5f63c7d2f7fdfcc733eb7fb137cc384",
              "status": "affected",
              "versionType": "git",
              "lessThan": "5d05de2f0928d81309a815ecc76d1a3ad72cbc16"
            },
            {
              "version": "11eeef41d5f63c7d2f7fdfcc733eb7fb137cc384",
              "status": "affected",
              "versionType": "git",
              "lessThan": "95be653a76793856ff8b2d8bd82c2943c23f5ca8"
            },
            {
              "version": "11eeef41d5f63c7d2f7fdfcc733eb7fb137cc384",
              "status": "affected",
              "versionType": "git",
              "lessThan": "79b90a96688e521771fa6ed3dc7864b76b8df293"
            },
            {
              "version": "11eeef41d5f63c7d2f7fdfcc733eb7fb137cc384",
              "status": "affected",
              "versionType": "git",
              "lessThan": "83fc5dd63455a779ea2dd0f7ffee3c920919d80b"
            },
            {
              "version": "11eeef41d5f63c7d2f7fdfcc733eb7fb137cc384",
              "status": "affected",
              "versionType": "git",
              "lessThan": "711987ba281fd806322a7cd244e98e2a81903114"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "versions": [
            {
              "version": "2.6.31",
              "status": "affected"
            },
            {
              "version": "0",
              "status": "unaffected",
              "versionType": "semver",
              "lessThan": "2.6.31"
            },
            {
              "version": "5.10.258",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.10.*"
            },
            {
              "version": "5.15.209",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "version": "6.1.175",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "version": "6.6.141",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.6.*"
            },
            {
              "version": "6.12.91",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.12.*"
            },
            {
              "version": "6.18.33",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.18.*"
            },
            {
              "version": "7.0.10",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "7.0.*"
            },
            {
              "version": "7.1",
              "status": "unaffected",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ]
        }
      ]
    }
  }
}