PT-2026-52331 · Linux · Linux

Publicado 2026-06-25 · Atualizado 2026-06-25 · CVE-2026-53236

NVD

In the Linux kernel, the following vulnerability has been resolved:

tcp: restrict SO ATTACH FILTER to priv users

This patch restricts the use of SO ATTACH FILTER (cBPF) on TCP sockets to users with CAP NET ADMIN capability.

This blocks potential side-channel attack where an unprivileged application attaches a filter to leak TCP sequence/acknowledgment numbers.

Identificadores relacionados

CVE-2026-53236

Produtos afetados

Linux

Referências · 7

• https://git.kernel.org/stable/c/ecfe9171b26ae3eed0cd8bab7a943e9e2c9e51ba · Nota
• https://git.kernel.org/stable/c/3747de241a66ef2c7032d2cc2b826a47c5fa0f6a · Nota
• https://git.kernel.org/stable/c/c68517a3e18e20997808821c5559d0cba4d776c1 · Nota
• https://git.kernel.org/stable/c/ede69b8f6670600e534591664584f810d7c385f9 · Nota
• https://git.kernel.org/stable/c/5d39580f68e6ddeedd15e587282207489dfb3da2 · Nota
• https://git.kernel.org/stable/c/82b3e7ce10c53fc12aab8904745603efc74f8c07 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-53236 · Nota de Segurança