Vulnerability in Linux

CVE-2026-45873

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets Userspace provides an optimized representation in case intervals are adjacent, where the end element is omitted. The existing partial overlap detection logic skips anonymous set checks on start elements for this reason. However, it is possible to add intervals that overlap to this anonymous where two start elements with the same, eg. A-B, A-C where C < B. start end A B start end A C Restore the check on overlapping start elements to report an overlap.

Published · last modified .

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

EPSS exploit prediction

EPSS: 0.002 (4.8th percentile), scored .

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 5th percentile — 4.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS trend (30 days)EPSS over the last 30 days for CVE-2026-45873: held from 0.002 to 0.002.

EPSS over last 30 days · oldest: 0.002 · newest: 0.002 · change: +0.000

Affected products

  • Linux — versions 4aacf3d78424293e318c616016865380b37b9cc5, 2bf1435fa19d2c58054391b3bba40d5510a5758c, 318cb24a4c3fce8140afaf84e4d45fcb76fb280b
  • Linux Kernel — versions 6.2

References

Frequently asked questions

What is CVE-2026-45873?
CVE-2026-45873 is a medium-severity vulnerability in Linux. CVSS score: 5.5/10. Published 2026-05-27.
How severe is CVE-2026-45873?
Medium severity. CVSS v3 base score is 5.5 out of 10.