Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-53211: Linux kernel network filter may expose leftover memory

CVE-2026-53211 · published 4 months ago

Summary

A part of the Linux kernel that handles network traffic can accidentally copy uninitialized data from its internal memory into a location that user programs can see. This could allow an attacker to learn information that should be hidden. Updating to the latest kernel version for the listed Linux distributions fixes the issue.

What to do

Update debian linux to version 7.0.13-1.
Update bellsoft linux-lts to version 6.18.38-r0.
Update canonical linux-aws-7.0 to version 7.0.0-1012.12~24.04.1.
Update canonical linux-azure-7.0 to version 7.0.0-1014.14~24.04.1.
Update canonical linux-gcp-7.0 to version 7.0.0-1011.11~24.04.1.
Update canonical linux-hwe-7.0 to version 7.0.0-31.31~24.04.1.
Update canonical linux-nvidia-7.0 to version 7.0.0-1018.18~24.04.1.
Update canonical linux-oracle-7.0 to version 7.0.0-1011.11~24.04.1.
Update canonical linux-riscv-7.0 to version 7.0.0-31.31.1~24.04.1.
Update canonical linux to version 7.0.0-31.31.
Update canonical linux-aws to version 7.0.0-1012.12.
Update canonical linux-azure to version 7.0.0-1014.14.
Update canonical linux-gcp to version 7.0.0-1011.11.
Update canonical linux-gke to version 7.0.0-1006.7.
Update canonical linux-ibm to version 7.0.0-1013.13.
Update canonical linux-nvidia to version 7.0.0-1018.18.
Update canonical linux-nvidia-bos to version 7.0.0-2018.18.
Update canonical linux-oem-7.0 to version 7.0.0-1013.13.
Update canonical linux-oracle to version 7.0.0-1011.11.
Update canonical linux-raspi to version 7.0.0-1019.19.
Update canonical linux-realtime to version 7.0.0-31.31.1.
Update canonical linux-riscv to version 7.0.0-31.31.1.
Update linux kernel to version 7.0.13.

Affected software

Ecosystem	Vendor	Product	Affected versions
Ubuntu:16.04:LTS	canonical	linux-hwe-edge	All versions
Ubuntu:18.04:LTS	canonical	linux-aws-5.0	All versions
Ubuntu:18.04:LTS	canonical	linux-aws-5.3	All versions
Ubuntu:18.04:LTS	canonical	linux-azure	All versions
Ubuntu:18.04:LTS	canonical	linux-azure-5.3	All versions
Ubuntu:18.04:LTS	canonical	linux-azure-edge	All versions
Ubuntu:18.04:LTS	canonical	linux-gcp	All versions
Ubuntu:18.04:LTS	canonical	linux-gcp-5.3	All versions
Ubuntu:18.04:LTS	canonical	linux-gke-4.15	All versions
Ubuntu:18.04:LTS	canonical	linux-gke-5.4	All versions
Ubuntu:18.04:LTS	canonical	linux-gkeop-5.4	All versions
Ubuntu:18.04:LTS	canonical	linux-hwe	All versions
Ubuntu:18.04:LTS	canonical	linux-hwe-edge	All versions
Ubuntu:18.04:LTS	canonical	linux-oem	All versions
Ubuntu:18.04:LTS	canonical	linux-oracle-5.0	All versions
Ubuntu:18.04:LTS	canonical	linux-oracle-5.3	All versions
Ubuntu:20.04:LTS	canonical	linux-aws-5.11	All versions
Ubuntu:20.04:LTS	canonical	linux-aws-5.13	All versions
Ubuntu:20.04:LTS	canonical	linux-aws-5.8	All versions
Ubuntu:20.04:LTS	canonical	linux-azure-5.11	All versions
Ubuntu:20.04:LTS	canonical	linux-azure-5.13	All versions
Ubuntu:20.04:LTS	canonical	linux-azure-5.8	All versions
Ubuntu:20.04:LTS	canonical	linux-azure-fde	All versions
Ubuntu:20.04:LTS	canonical	linux-gcp-5.11	All versions
Ubuntu:20.04:LTS	canonical	linux-gcp-5.13	All versions
Ubuntu:20.04:LTS	canonical	linux-gcp-5.8	All versions
Ubuntu:20.04:LTS	canonical	linux-gke	All versions
Ubuntu:20.04:LTS	canonical	linux-gke-5.15	All versions
Ubuntu:20.04:LTS	canonical	linux-gkeop	All versions
Ubuntu:20.04:LTS	canonical	linux-gkeop-5.15	All versions
Ubuntu:20.04:LTS	canonical	linux-hwe-5.11	All versions
Ubuntu:20.04:LTS	canonical	linux-hwe-5.13	All versions
Ubuntu:20.04:LTS	canonical	linux-hwe-5.8	All versions
Ubuntu:20.04:LTS	canonical	linux-intel-5.13	All versions
Ubuntu:20.04:LTS	canonical	linux-oem-5.10	All versions
Ubuntu:20.04:LTS	canonical	linux-oem-5.13	All versions
Ubuntu:20.04:LTS	canonical	linux-oem-5.14	All versions
Ubuntu:20.04:LTS	canonical	linux-oem-5.6	All versions
Ubuntu:20.04:LTS	canonical	linux-oracle-5.11	All versions
Ubuntu:20.04:LTS	canonical	linux-oracle-5.13	All versions
Ubuntu:20.04:LTS	canonical	linux-oracle-5.8	All versions
Ubuntu:20.04:LTS	canonical	linux-raspi2	All versions
Ubuntu:20.04:LTS	canonical	linux-riscv	All versions
Ubuntu:20.04:LTS	canonical	linux-riscv-5.11	All versions
Ubuntu:20.04:LTS	canonical	linux-riscv-5.8	All versions
Ubuntu:22.04:LTS	canonical	linux-allwinner-5.19	All versions
Ubuntu:22.04:LTS	canonical	linux-aws-5.19	All versions
Ubuntu:22.04:LTS	canonical	linux-aws-6.2	All versions
Ubuntu:22.04:LTS	canonical	linux-aws-6.5	All versions
Ubuntu:22.04:LTS	canonical	linux-azure-5.19	All versions

Showing 50 of 125. Show the rest

Ecosystem	Vendor	Product	Affected versions
Ubuntu:22.04:LTS	canonical	linux-azure-6.2	All versions
Ubuntu:22.04:LTS	canonical	linux-azure-6.5	All versions
Ubuntu:22.04:LTS	canonical	linux-azure-fde-5.19	All versions
Ubuntu:22.04:LTS	canonical	linux-azure-fde-6.2	All versions
Ubuntu:22.04:LTS	canonical	linux-gcp-5.19	All versions
Ubuntu:22.04:LTS	canonical	linux-gcp-6.2	All versions
Ubuntu:22.04:LTS	canonical	linux-gcp-6.5	All versions
Ubuntu:22.04:LTS	canonical	linux-hwe-5.19	All versions
Ubuntu:22.04:LTS	canonical	linux-hwe-6.2	All versions
Ubuntu:22.04:LTS	canonical	linux-hwe-6.5	All versions
Ubuntu:22.04:LTS	canonical	linux-intel-iot-realtime	All versions
Ubuntu:22.04:LTS	canonical	linux-lowlatency-hwe-5.19	All versions
Ubuntu:22.04:LTS	canonical	linux-lowlatency-hwe-6.2	All versions
Ubuntu:22.04:LTS	canonical	linux-lowlatency-hwe-6.5	All versions
Ubuntu:22.04:LTS	canonical	linux-nvidia-6.2	All versions
Ubuntu:22.04:LTS	canonical	linux-nvidia-6.5	All versions
Ubuntu:22.04:LTS	canonical	linux-oem-5.17	All versions
Ubuntu:22.04:LTS	canonical	linux-oem-6.0	All versions
Ubuntu:22.04:LTS	canonical	linux-oem-6.1	All versions
Ubuntu:22.04:LTS	canonical	linux-oem-6.5	All versions
Ubuntu:22.04:LTS	canonical	linux-oracle-6.5	All versions
Ubuntu:22.04:LTS	canonical	linux-realtime	All versions
Ubuntu:22.04:LTS	canonical	linux-riscv	All versions
Ubuntu:22.04:LTS	canonical	linux-riscv-5.19	All versions
Ubuntu:22.04:LTS	canonical	linux-riscv-6.5	All versions
Ubuntu:22.04:LTS	canonical	linux-starfive-5.19	All versions
Ubuntu:22.04:LTS	canonical	linux-starfive-6.2	All versions
Ubuntu:22.04:LTS	canonical	linux-starfive-6.5	All versions
Ubuntu:24.04:LTS	canonical	linux-aws-6.14	All versions
Ubuntu:24.04:LTS	canonical	linux-azure-6.11	All versions
Ubuntu:24.04:LTS	canonical	linux-azure-6.14	All versions
Ubuntu:24.04:LTS	canonical	linux-azure-fde-6.14	All versions
Ubuntu:24.04:LTS	canonical	linux-azure-nvidia-6.14	All versions
Ubuntu:24.04:LTS	canonical	linux-gcp-6.11	All versions
Ubuntu:24.04:LTS	canonical	linux-gcp-6.14	All versions
Ubuntu:24.04:LTS	canonical	linux-hwe-6.11	All versions
Ubuntu:24.04:LTS	canonical	linux-hwe-6.14	All versions
Ubuntu:24.04:LTS	canonical	linux-hwe-7.0	< 7.0.0-31.31~24.04.1 Fix: upgrade to 7.0.0-31.31~24.04.1
Ubuntu:24.04:LTS	canonical	linux-lowlatency-hwe-6.11	All versions
Ubuntu:24.04:LTS	canonical	linux-nvidia-6.11	All versions
Ubuntu:24.04:LTS	canonical	linux-nvidia-7.0	< 7.0.0-1018.18~24.04.1 Fix: upgrade to 7.0.0-1018.18~24.04.1
Ubuntu:24.04:LTS	canonical	linux-oem-6.11	All versions
Ubuntu:24.04:LTS	canonical	linux-oem-6.14	All versions
Ubuntu:24.04:LTS	canonical	linux-oem-6.8	All versions
Ubuntu:24.04:LTS	canonical	linux-oracle-6.14	All versions
Ubuntu:24.04:LTS	canonical	linux-raspi-realtime	All versions
Ubuntu:24.04:LTS	canonical	linux-realtime	All versions
Ubuntu:24.04:LTS	canonical	linux-riscv	All versions
Ubuntu:24.04:LTS	canonical	linux-riscv-6.14	All versions
Ubuntu:Nvidia-BlueField:24.04:LTS	canonical	linux-bluefield	All versions
Ubuntu:Pro:Realtime:24.04:LTS	canonical	linux-realtime-6.14	All versions
Ubuntu:26.04:LTS	canonical	linux	< 7.0.0-31.31 Fix: upgrade to 7.0.0-31.31
Ubuntu:26.04:LTS	canonical	linux-aws	< 7.0.0-1012.12 Fix: upgrade to 7.0.0-1012.12
Ubuntu:26.04:LTS	canonical	linux-azure	< 7.0.0-1014.14 Fix: upgrade to 7.0.0-1014.14
Ubuntu:26.04:LTS	canonical	linux-azure-fde	All versions
Ubuntu:26.04:LTS	canonical	linux-gcp	< 7.0.0-1011.11 Fix: upgrade to 7.0.0-1011.11
Ubuntu:26.04:LTS	canonical	linux-gke	< 7.0.0-1006.7 Fix: upgrade to 7.0.0-1006.7
Ubuntu:26.04:LTS	canonical	linux-ibm	< 7.0.0-1013.13 Fix: upgrade to 7.0.0-1013.13
Ubuntu:26.04:LTS	canonical	linux-nvidia	< 7.0.0-1018.18 Fix: upgrade to 7.0.0-1018.18
Ubuntu:26.04:LTS	canonical	linux-oem-7.0	< 7.0.0-1013.13 Fix: upgrade to 7.0.0-1013.13
Ubuntu:26.04:LTS	canonical	linux-oracle	< 7.0.0-1011.11 Fix: upgrade to 7.0.0-1011.11
Ubuntu:26.04:LTS	canonical	linux-raspi	< 7.0.0-1019.19 Fix: upgrade to 7.0.0-1019.19
Ubuntu:26.04:LTS	canonical	linux-realtime	< 7.0.0-31.31.1 Fix: upgrade to 7.0.0-31.31.1
Ubuntu:26.04:LTS	canonical	linux-riscv	< 7.0.0-31.31.1 Fix: upgrade to 7.0.0-31.31.1
Debian:14	debian	linux	< 7.0.13-1 Fix: upgrade to 7.0.13-1
–	linux	linux_kernel	>= 6.18, < 6.18.36 >= 6.19, < 7.0.13 7.1 `cpe:2.3:o:linux:linux_kernel::::::::`
Alpaquita:stream	bellsoft	linux-lts	>= 6.18.35-r1, < 6.18.38-r0 Fix: upgrade to 6.18.38-r0
Ubuntu:24.04:LTS	canonical	linux-aws-7.0	< 7.0.0-1012.12~24.04.1 Fix: upgrade to 7.0.0-1012.12~24.04.1
Ubuntu:24.04:LTS	canonical	linux-azure-7.0	< 7.0.0-1014.14~24.04.1 Fix: upgrade to 7.0.0-1014.14~24.04.1
Ubuntu:24.04:LTS	canonical	linux-azure-fde-7.0	All versions
Ubuntu:24.04:LTS	canonical	linux-gcp-7.0	< 7.0.0-1011.11~24.04.1 Fix: upgrade to 7.0.0-1011.11~24.04.1
Ubuntu:24.04:LTS	canonical	linux-oracle-7.0	< 7.0.0-1011.11~24.04.1 Fix: upgrade to 7.0.0-1011.11~24.04.1
Ubuntu:24.04:LTS	canonical	linux-riscv-7.0	< 7.0.0-31.31.1~24.04.1 Fix: upgrade to 7.0.0-31.31.1~24.04.1
Ubuntu:26.04:LTS	canonical	linux-nvidia-bos	< 7.0.0-2018.18 Fix: upgrade to 7.0.0-2018.18
Linux	linux	kernel	>= 6.19.0, < 7.0.13 Fix: upgrade to 7.0.13

Original advisory text

netfilter: nft_meta_bridge: fix stale stack leak via IIFHWADDR register

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_meta_bridge: fix stale stack leak via IIFHWADDR register NFT_META_BRI_IIFHWADDR declares its destination register with len = ETH_ALEN (6 bytes), which the register-init tracking rounds up to two 32-bit registers (8 bytes). nft_meta_bridge_get_eval() then does memcpy(dest, br_dev->dev_addr, ETH_ALEN), writing only 6 bytes and leaving the upper 2 bytes of the second register as uninitialised nft_do_chain() stack. A downstream load of that register span leaks those stale bytes to userspace. Zero the second register before the memcpy so the full declared span is written.

References

https://git.kernel.org/stable/c/07acb9798477535933bd658ac9fa85b6cb10d995 Third Party Advisory
https://git.kernel.org/stable/c/c7d573551f9286100a055ef696cde6af54549677 Third Party Advisory
https://git.kernel.org/stable/c/f1e81d571e375d10e50e852223593493d98c1bac Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2026-53211 Vendor Advisory
https://ubuntu.com/security/CVE-2026-53211 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-53211 Third Party Advisory
https://docs.bell-sw.com/security/cves/CVE-2026-53211 Vendor Advisory
https://git.kernel.org/linus/c7d573551f9286100a055ef696cde6af54549677 Third Party Advisory
https://ubuntu.com/security/notices/USN-8726-1 Vendor Advisory
https://ubuntu.com/security/notices/USN-8727-1 Vendor Advisory
https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53211... Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-53211 Vendor Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
https://ubuntu.com/security/notices/USN-8728-1 Vendor Advisory
https://ubuntu.com/security/notices/USN-8760-1 Vendor Advisory
https://ubuntu.com/security/notices/USN-8726-2 Vendor Advisory
https://ubuntu.com/security/notices/USN-8726-3 Vendor Advisory
https://ubuntu.com/security/notices/USN-8800-1 Vendor Advisory
https://ubuntu.com/security/notices/USN-8760-2 Vendor Advisory
https://ubuntu.com/security/notices/USN-8728-2 Vendor Advisory
https://ubuntu.com/security/notices/USN-8726-4 Vendor Advisory
https://ubuntu.com/security/notices/USN-8728-3 Vendor Advisory

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker partial control (estimated)

Severity

6.3 Medium

Exploitation

<1% chance of attack within 30 days

Type

CWE-401Memory Leak

Timeline

Published25 Jun 2026

Updated26 Oct 2026

First seen25 Jun 2026

Sources

UBUNTU-CVE-2026-53211 · OSV

CVE-2026-53211 · NVD

DEBIAN-CVE-2026-53211 · OSV

BELL-CVE-2026-53211 · OSV

CVE-2026-53211 · OSV

Track software like this

Free during beta