CVE Explorer

CVE-2026-53219

In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: avoid leaking percpu counter pointers The native and compat get-entries paths copy the fixed rule entry header from the kernelized rule blob to userspace before overwriting the entry's counter fields with a sanitized counter snapshot. On SMP kernels, entry->counters.pcnt contains the percpu allocation address used by x_tables rule counters. A caller can provide a userspace buffer that faults during the in

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:d66fc7c293d4e917e04a1baea5ac89a2b9313228c8e397deaba73aa58196dd52

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/ipv4/netfilter/arp_tables.c","net/ipv4/netfilter/ip_tables.c","net/ipv6/netfilter/ip6_tables.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"b74ba3343eb44b2cbf7e9665918c287df1d52ebb","status":"affected","version":"71ae0dff02d756e4d2ca710b79f2ff5390029a5f","versionType":"git"},{"lessThan":"0b35dc8527ccc16b7dc34e8a3164313e68cd4e45","status":"affected","version":"71ae0dff02d756e4d2ca710b79f2ff5390029a5f","versionType":"git"},{"lessThan":"b28e2fcad3db7e8687b1…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:5ac009f967b3d77fa90b9d03f912b4271a2ba98fe8b611c4af8870020dae8e32 · sha256:a6bc3d54276b0211… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["net/ipv4/netfilter/arp_tables.c","net/ipv4/netfilter/ip_tables.c","net/ipv6/netfilter/ip6_tables.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.2"},{"lessThan":"4.2","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.259","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.210","versionType":"semver"},{"lessThanOrEqual":"6.1.*",…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:5ac009f967b3d77fa90b9d03f912b4271a2ba98fe8b611c4af8870020dae8e32 · sha256:a6bc3d54276b0211… · /containers/cna/affected/1

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:5ac009f967b3d77fa90b9d03f912b4271a2ba98fe8b611c4af8870020dae8e32 · sha256:a6bc3d54276b0211… · /containers/cna/affected/0

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:5ac009f967b3d77fa90b9d03f912b4271a2ba98fe8b611c4af8870020dae8e32 · sha256:a6bc3d54276b0211… · /containers/cna/affected/1

Source references

8 source assertions

{"url":"https://git.kernel.org/stable/c/08a3e218064db11f154ad9ad5541751ea7f34ebe"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:5ac009f967b3d77fa90b9d03f912b4271a2ba98fe8b611c4af8870020dae8e32 · sha256:a6bc3d54276b0211… · /containers/cna/references/5

{"url":"https://git.kernel.org/stable/c/0b35dc8527ccc16b7dc34e8a3164313e68cd4e45"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:5ac009f967b3d77fa90b9d03f912b4271a2ba98fe8b611c4af8870020dae8e32 · sha256:a6bc3d54276b0211… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/8d67e42ad3b1a95a152541015a07110e06992d6c"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:5ac009f967b3d77fa90b9d03f912b4271a2ba98fe8b611c4af8870020dae8e32 · sha256:a6bc3d54276b0211… · /containers/cna/references/4

{"url":"https://git.kernel.org/stable/c/a0d16941adf3a501956d74aefd8d6e217906e79c"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:5ac009f967b3d77fa90b9d03f912b4271a2ba98fe8b611c4af8870020dae8e32 · sha256:a6bc3d54276b0211… · /containers/cna/references/3

{"url":"https://git.kernel.org/stable/c/b28e2fcad3db7e8687b15bc20bced26b5b7c920e"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:5ac009f967b3d77fa90b9d03f912b4271a2ba98fe8b611c4af8870020dae8e32 · sha256:a6bc3d54276b0211… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/b74ba3343eb44b2cbf7e9665918c287df1d52ebb"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:5ac009f967b3d77fa90b9d03f912b4271a2ba98fe8b611c4af8870020dae8e32 · sha256:a6bc3d54276b0211… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/f7f2fbb0e893a0238dc464f8d8c0f5609bec584f"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:5ac009f967b3d77fa90b9d03f912b4271a2ba98fe8b611c4af8870020dae8e32 · sha256:a6bc3d54276b0211… · /containers/cna/references/7

{"url":"https://git.kernel.org/stable/c/fb0521aff1e10e300d89725cc439d3ea74c828c5"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:5ac009f967b3d77fa90b9d03f912b4271a2ba98fe8b611c4af8870020dae8e32 · sha256:a6bc3d54276b0211… · /containers/cna/references/6

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer