CVE-2026-53211: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_meta_bridge: fix stale stack leak via IIFHWADDR register NFT_META_BRI_IIFHWADDR declares its destination register with len = ETH_ALEN (6 bytes), which the register-init tracking rounds up to two 32-bit registers (8 bytes). nft_meta_bridge_get_eval() then does memcpy(dest, br_dev->dev_addr, ETH_ALEN), writing only 6 bytes and leaving the upper 2 bytes of the second register as uninitialised nft_do_chain() stack. A downstream load of that register span leaks those stale bytes to userspace. Zero the second register before the memcpy so the full declared span is written.

Засегнати продукти

• Linux Linux: cbd2257dc96e3e46217540fcb095a757ffa20d96 преди 07acb9798477535933bd658ac9fa85b6cb10d995; cbd2257dc96e3e46217540fcb095a757ffa20d96 преди f1e81d571e375d10e50e852223593493d98c1bac; cbd2257dc96e3e46217540fcb095a757ffa20d96 преди c7d573551f9286100a055ef696cde6af54549677
• Linux Linux: 6.18; преди 6.18; 6.18.36 до 6.18.*; 7.0.13 до 7.0.*; от 7.1 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99268
• CVE-2026-99266
• CVE-2026-99267

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-53211
• https://nvd.nist.gov/vuln/detail/CVE-2026-53211
• https://git.kernel.org/stable/c/07acb9798477535933bd658ac9fa85b6cb10d995
• https://git.kernel.org/stable/c/f1e81d571e375d10e50e852223593493d98c1bac
• https://git.kernel.org/stable/c/c7d573551f9286100a055ef696cde6af54549677