PT-2026-57153 · Linux · Linux Kernel

Published 2026-07-10 · Updated 2026-07-10 · CVE-2026-53363

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the iptfs consume frags() function within the xfrm: iptfs component. The function transfers paged fragments between socket buffers but fails to propagate the SKBFL SHARED FRAG flag. This flag is essential for identifying fragments backed by read-only page-cache pages, allowing the Encapsulating Security Payload (ESP) to determine if in-place encryption is safe to perform.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-53363

Affected Products

Linux Kernel

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-53363 · Security Note
• https://twitter.com/vuldb/status/2075620366085742707 · Twitter Post
• https://git.kernel.org/stable/c/e9096a5a170e7ecd6467bc2e08668ec39897cda7 · Note
• https://git.kernel.org/stable/c/dd66f7f6e360ee82cd905517726f8e9091265de5 · Note
• https://git.kernel.org/stable/c/c885d111ed9f5a0a1f3cc4e87a50db6518abaa6c · Note