PT-2026-52227 · Linux · Linux

Published 2026-06-25 · Updated 2026-06-25 · CVE-2026-53131

Mitre

In the Linux kernel, the following vulnerability has been resolved:

netfilter: require Ethernet MAC header before using eth hdr()

ip6t eui64, xt mac, the bitmap:ip,mac, hash:ip,mac, and hash:mac ipset types, and nf log syslog access eth hdr(skb) after either assuming that the skb is associated with an Ethernet device or checking only that the ETH HLEN bytes at skb mac header(skb) lie between skb->head and skb->data.

Make these paths first verify that the skb is associated with an Ethernet device, that the MAC header was set, and that it spans at least a full Ethernet header before accessing eth hdr(skb).

Related Identifiers

CVE-2026-53131

Affected Products

Linux

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2026-53131 · Security Note
• https://git.kernel.org/stable/c/4435888e1bf139d2bfe5911643d4217382136743 · Note
• https://git.kernel.org/stable/c/cea435ea7e868ea6fdf039bc4f2090c1d829b556 · Note
• https://git.kernel.org/stable/c/62443dc21114c0bbc476fa62973db89743f2f137 · Note
• https://git.kernel.org/stable/c/726abf97566867f808fec9d8a408eb9698bd570a · Note
• https://git.kernel.org/stable/c/063f43361e884acd7300790e90194430275d0d0c · Note
• https://git.kernel.org/stable/c/5d634afb8b83b49de562792fd0d047416a43bd4d · Note
• https://git.kernel.org/stable/c/367abcacc13a8e2e7624408b7f593bd1e60e49d9 · Note