We tested the vulnerability CVE-2026-112158, an integer overflow in the ipt_SAME.ko kernel module of MikroTik RouterOS. The same_check() function sums the sizes of address ranges into a 32-bit counter; by specifying the full range 0.0.0.0-255.255.255.255, the sum overflows to 0, causing an undersized kernel allocation and a subsequent heap overflow that locks up the network subsystem (DoS).
The lab consists of two CHRs:
Reserved for members
This content is reserved for those in the dojo.
Entry is free: you subscribe to the newsletter with your email and then choose to join the dojo, without a password. How it works
