IT

Tracker / CVE-2026-53238

CVE-2026-53238

Medium 5.5

In the Linux kernel, the following vulnerability has been resolved: netlabel: validate unlabeled address and mask attribute lengths netlbl_unlabel_addrinfo_get() used the address attribute length to determine whether the attribute data could be read as an IPv4 or IPv6 address, but did not independently validate the corresponding mask attribute length. A crafted Generic Netlink request could therefore provide a valid IPv4/IPv6 address attribute with a shorter mask attribute, which would later be read as a full struct in_addr or struct in6_addr. NLA_BINARY policy lengths are maximum lengths by default, so use NLA_POLICY_EXACT_LEN() for the unlabeled IPv4/IPv6 address and mask attributes. This rejects short attributes during policy validation and also exposes the exact length requirements through policy introspection.

Affected products and versions

linux linux_kernel
linux linux_kernel · 2.6.25 → 5.10.259
linux linux_kernel · 5.11 → 5.15.210
linux linux_kernel · 5.16 → 6.1.176
linux linux_kernel · 6.13 → 6.18.36
linux linux_kernel · 6.19 → 7.0.13
linux linux_kernel · 6.2 → 6.6.143
linux linux_kernel · 6.7 → 6.12.94

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References