PT-2026-52331 · Linux · Linux

Published 2026-06-25 · Updated 2026-06-25 · CVE-2026-53236

NVD

In the Linux kernel, the following vulnerability has been resolved:

tcp: restrict SO ATTACH FILTER to priv users

This patch restricts the use of SO ATTACH FILTER (cBPF) on TCP sockets to users with CAP NET ADMIN capability.

This blocks potential side-channel attack where an unprivileged application attaches a filter to leak TCP sequence/acknowledgment numbers.

Related Identifiers

CVE-2026-53236

Affected Products

Linux

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-53236 · Security Note
• https://git.kernel.org/stable/c/ecfe9171b26ae3eed0cd8bab7a943e9e2c9e51ba · Note
• https://git.kernel.org/stable/c/3747de241a66ef2c7032d2cc2b826a47c5fa0f6a · Note
• https://git.kernel.org/stable/c/c68517a3e18e20997808821c5559d0cba4d776c1 · Note
• https://git.kernel.org/stable/c/ede69b8f6670600e534591664584f810d7c385f9 · Note
• https://git.kernel.org/stable/c/5d39580f68e6ddeedd15e587282207489dfb3da2 · Note
• https://git.kernel.org/stable/c/82b3e7ce10c53fc12aab8904745603efc74f8c07 · Note