PT-2026-52227 · Linux · Linux

Publicado 2026-06-25 · Atualizado 2026-06-25 · CVE-2026-53131

Mitre

In the Linux kernel, the following vulnerability has been resolved:

netfilter: require Ethernet MAC header before using eth hdr()

ip6t eui64, xt mac, the bitmap:ip,mac, hash:ip,mac, and hash:mac ipset types, and nf log syslog access eth hdr(skb) after either assuming that the skb is associated with an Ethernet device or checking only that the ETH HLEN bytes at skb mac header(skb) lie between skb->head and skb->data.

Make these paths first verify that the skb is associated with an Ethernet device, that the MAC header was set, and that it spans at least a full Ethernet header before accessing eth hdr(skb).

Identificadores relacionados

CVE-2026-53131

Produtos afetados

Linux

Referências · 8

• https://git.kernel.org/stable/c/4435888e1bf139d2bfe5911643d4217382136743 · Nota
• https://git.kernel.org/stable/c/cea435ea7e868ea6fdf039bc4f2090c1d829b556 · Nota
• https://git.kernel.org/stable/c/62443dc21114c0bbc476fa62973db89743f2f137 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-53131 · Nota de Segurança
• https://git.kernel.org/stable/c/726abf97566867f808fec9d8a408eb9698bd570a · Nota
• https://git.kernel.org/stable/c/063f43361e884acd7300790e90194430275d0d0c · Nota
• https://git.kernel.org/stable/c/5d634afb8b83b49de562792fd0d047416a43bd4d · Nota
• https://git.kernel.org/stable/c/367abcacc13a8e2e7624408b7f593bd1e60e49d9 · Nota