PT-2026-54821 · Linux · Linux Kernel

Syzbot · CVE-2026-53353 · Published 2026-07-01 · Updated 2026-07-18

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the High-availability Seamless Redundancy (HSR) implementation where a warning is incorrectly triggered in the hsr addr is self() function. The problem occurs because hsr->self node is cleared in hsr del self node(), which is called by hsr dellink(). Since hsr dellink() is executed before unregister netdevice many(), a timing window is created where a user can still access the device while hsr->self node has already been cleared, leading to an erroneous WARN ONCE() trigger.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2026-53353

ECHO-B304-A52C-6FC2

Affected Products

Linux Kernel

References · 19

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53353.json · Exploit
• https://git.kernel.org/stable/c/d71bb171661ec0225bf4babdd4d296d744982fb3 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-53353 · Vendor Advisory
• https://git.kernel.org/stable/c/afd0f17ca46258cec3a5cc48b8df9327fe772490 · Patch
• https://osv.dev/vulnerability/BELL-CVE-2026-53353 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2026-53353 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2026-53353 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-53353 · Vendor Advisory
• https://git.kernel.org/stable/c/66a46e22396fd5d09606f37f73643eb20e99aa42 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-53353 · Vendor Advisory
• https://git.kernel.org/stable/c/271355c2ef6171dbc815e7ae653eed63444bbd58 · Patch
• https://ubuntu.com/security/CVE-2026-53353 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-53353 · Security Note
• https://git.kernel.org/stable/c/0232b6fcb7615fb7fecfe0727a23065a53e228b8 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-53353 · Security Note