Firetruck

CVE-2026-53266

KEV
Updated Sep 19, 2026 · PUBLISHED
View KEV entry →

Description

Linux Kernel contains an out-of-bounds write vulnerability in the ebtables SNAT target which allows an ARP sender hardware address rewrite to write directly into a nonlinear socket-buffer fragment backed by a splice-imported file page. The impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
LinuxLinux / Linux>= 0, < 5.10unaffected
LinuxLinux / Linux2f3839075a5f8dcf116c1abe35b36b018ac62445affected
LinuxLinux / Linux5.10affected
LinuxLinux / Linux>= 5.10.259, <= 5.10.*unaffected
LinuxLinux / Linux>= 5.15.210, <= 5.15.*unaffected
LinuxLinux / Linux51ba2945a8ef65ae437c8f9ba05f0343aa82ae5baffected
LinuxLinux / Linux>= 5.4.73, < 5.5affected
LinuxLinux / Linux>= 5.8.17, < 5.9affected
LinuxLinux / Linux>= 5.9.2, < 5.10affected
LinuxLinux / Linux>= 6.1.176, <= 6.1.*unaffected
LinuxLinux / Linux>= 6.12.94, <= 6.12.*unaffected
LinuxLinux / Linux>= 6.18.36, <= 6.18.*unaffected
LinuxLinux / Linux>= 63137bc5882a1882c553d389fdeeeace86ee1741, < afd64b59c3de9bbbdd3759e834fdc55cda716e0baffected
LinuxLinux / Linux>= 63137bc5882a1882c553d389fdeeeace86ee1741, < b7e91939ba9be805a62a257fa4e227dffbb88fa0affected
LinuxLinux / Linux>= 63137bc5882a1882c553d389fdeeeace86ee1741, < 76280b78cc9f23bdc6438e10ad6dff148ef8375baffected
LinuxLinux / Linux>= 63137bc5882a1882c553d389fdeeeace86ee1741, < bf84ad7c7a9ede46e31afaa41a1ba06a159e8c87affected
LinuxLinux / Linux>= 63137bc5882a1882c553d389fdeeeace86ee1741, < 67ba971ae02514d85818fe0c32549ab4bfa3bf49affected
LinuxLinux / Linux>= 63137bc5882a1882c553d389fdeeeace86ee1741, < c9b5ff59feffb92a147a84a5aa28acd2cb8ff4c5affected
LinuxLinux / Linux>= 63137bc5882a1882c553d389fdeeeace86ee1741, < b18675263db1147c8e1cab625400c13a0d87bd2daffected
LinuxLinux / Linux>= 63137bc5882a1882c553d389fdeeeace86ee1741, < 153ea96c806aea395daba907a4f88480b6ad5093affected
LinuxLinux / Linux>= 6.6.143, <= 6.6.*unaffected
LinuxLinux / Linux>= 7.0.13, <= 7.0.*unaffected
LinuxLinux / Linux>= 7.1, <= *unaffected
LinuxLinux / Linuxb7d23c2c87584eb429f115c078ed511be8b18e29affected