CVE-2026-53001

Published: Jun 24, 2026Modified: Jul 14, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: xtables: restrict several matches to inet family This is a partial revert of: commit ab4f21e6fb1c ("netfilter: xtables: use NFPROTO_UNSPEC in more extensions") to allow ipv4 and ipv6 only. - xt_mac - xt_owner - xt_physdev These extensions are not used by ebtables in userspace. Moreover, xt_realm is only for ipv4, since dst->tclassid is ipv4 specific.

Affected (7)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 2.6.28 to 5.10.258
Linux Linux Kernel	From 5.11 to 5.15.209
Linux Linux Kernel	From 5.16 to 6.1.175
Linux Linux Kernel	From 6.13 to 6.18.33
Linux Linux Kernel	From 6.19 to 7.0.10
Linux Linux Kernel	From 6.2 to 6.6.141
Linux Linux Kernel	From 6.7 to 6.12.91