PT-2026-60411 · Linux · Linux Kernel

CVE-2026-53366 · Published 2026-07-16 · Updated 2026-07-16

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description An issue exists in the IPv4 implementation within the ip append data() function. When the paged-allocation branch is executed, the alloclen and pagedlen variables are calculated incorrectly because they do not account for the fragmentation gap (fraggap). Specifically, the linear area of the socket buffer (skb) becomes undersized by the number of fraggap bytes, while the pagedlen is overstated by the same amount. This occurs because bytes carried over from a previous skb are copied into the new skb linear area at the transhdrlen offset.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-53366

Affected Products

Linux Kernel

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2026-53366 · Security Note
• https://twitter.com/vuldb/status/2077808874690875644 · Twitter Post
• https://git.kernel.org/stable/c/77798d7be6ef71e72fb6fc8a2901bf74ebc9706f · Note
• https://git.kernel.org/stable/c/a9c24eda24bd15f432e37824e6fc440977cb241c · Note
• https://git.kernel.org/stable/c/ce494707a9c07f27c219ca67f3e138061f53d9b3 · Note
• https://git.kernel.org/stable/c/c04d9ece23deb9e26c19f9ca215e98b3295aa1bb · Note
• https://git.kernel.org/stable/c/eca856950f7cb1a221e02b99d758409f2c5cec42 · Note
• https://twitter.com/VulmonFeeds/status/2077649293180010898 · Twitter Post