Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-53001

netfilter: xtables: restrict several matches to inet family

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.10.258, 5.15.209, 6.1.175, 6.6.141, 6.12.91, and 2 more
None on Exploit-DB, Metasploit or GitHub

Summary

In the Linux kernel, the following vulnerability has been resolved: netfilter: xtables: restrict several matches to inet family This is a partial revert of: commit ab4f21e6fb1c ("netfilter: xtables: use NFPROTO_UNSPEC in more extensions") to allow ipv4 and ipv6 only. • xt_mac • xt_owner • xt_physdev These extensions are not used by ebtables in userspace. Moreover, xt_realm is only for ipv4, since dst->tclassid is ipv4 specific.

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • Linux Linux

    From ab4f21e6fb1c09b13c4c3cb8357babe8223471bd · fixed in 14203f9edf944b3fb63faadd62f38452421ecdfc; From ab4f21e6fb1c09b13c4c3cb8357babe8223471bd · fixed in 7eaf9c740f33230cb224dc265f3c69f8531ff57b; From ab4f21e6fb1c09b13c4c3cb8357babe8223471bd · fixed in 9a109751b297b0f2135495749ef5a18ba31ec7d4; From ab4f21e6fb1c09b13c4c3cb8357babe8223471bd · fixed in cbeb259f31382de70a70a59ffd0e66f5e80d9818; From ab4f21e6fb1c09b13c4c3cb8357babe8223471bd · fixed in 689a91ff18d6448d94c1ab7c076fecdb2b668bef; From ab4f21e6fb1c09b13c4c3cb8357babe8223471bd · fixed in 76160e04440c9698b989dbd9492a7ec4f520c9ee; From ab4f21e6fb1c09b13c4c3cb8357babe8223471bd · fixed in fa88161ef56e29bdaa05cc89dbc4ee221e94bfe9; From ab4f21e6fb1c09b13c4c3cb8357babe8223471bd · fixed in b6fe26f86a1649f84e057f3f15605b08eda15497

  • Linux Linux

    2.6.28

  • KernelLinux

    From 2.6.28 · fixed in 5.10.258; From 5.11.0 · fixed in 5.15.209; From 5.16.0 · fixed in 6.1.175; From 6.2.0 · fixed in 6.6.141; From 6.7.0 · fixed in 6.12.91; From 6.13.0 · fixed in 6.18.33; From 6.19.0 · fixed in 7.0.10

References 8

git.kernel.org