9.4
CRITICAL
CVSS 3.1
CVE-2026-53131
netfilter: require Ethernet MAC header before using eth_hdr()
Overview
Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: require Ethernet MAC header before using eth_hdr() `ip6t_eui64`, `xt_mac`, the `bitmap:ip,mac`, `hash:ip,mac`, and `hash:mac` ipset types, and `nf_log_syslog` access `eth_hdr(skb)` after either assuming that the skb is associated with an Ethernet device or checking only that the `ETH_HLEN` bytes at `skb_mac_header(skb)` lie between `skb->head` and `skb->data`. Make these paths first verify that the skb is associated with an Ethernet device, that the MAC header was set, and that it spans at least a full Ethernet header before accessing `eth_hdr(skb)`.
Details
INFO
Published Date :
June 25, 2026, 9:16 a.m.
Last Modified :
July 6, 2026, 3:24 p.m.
Remotely Exploit :
Yes !
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Scoring
CVSS Scores
The Common Vulnerability Scoring System is a standardized framework
for assessing the severity of vulnerabilities in software and systems.
We collect and displays CVSS scores from various sources for each CVE.
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS 3.1 | CRITICAL | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
Solution
Update the Linux kernel to patch the netfilter vulnerability related to MAC header validation.
- Apply the latest Linux kernel updates.
- Verify Ethernet device association in skb.
- Ensure MAC header is properly set.
- Check header spans full Ethernet size.
References
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2026-53131.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2026-53131 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2026-53131
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-53131 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2026-53131 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
Initial Analysis by [email protected]
Jul. 06, 2026
Action Type Old Value New Value Added CWE NVD-CWE-noinfo Added CPE Configuration OR *cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:2.6.12:-:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.16 up to (excluding) 6.1.176 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.2 up to (excluding) 6.6.143 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.13 up to (excluding) 6.18.36 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.7 up to (excluding) 6.12.94 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.19 up to (excluding) 7.0.13 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 2.6.12.1 up to (excluding) 5.15.210 Added Reference Type kernel.org: https://git.kernel.org/stable/c/063f43361e884acd7300790e90194430275d0d0c Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/367abcacc13a8e2e7624408b7f593bd1e60e49d9 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/4435888e1bf139d2bfe5911643d4217382136743 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/5d634afb8b83b49de562792fd0d047416a43bd4d Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/62443dc21114c0bbc476fa62973db89743f2f137 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/726abf97566867f808fec9d8a408eb9698bd570a Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/cea435ea7e868ea6fdf039bc4f2090c1d829b556 Types: Patch -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Jun. 29, 2026
Action Type Old Value New Value Changed Affected [{'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '1da177e4c3f41524e886b7f1b8a0c1fc7321cac2', 'lessThan': '4435888e1bf139d2bfe5911643d4217382136743', 'versionType': 'git'}, {'status': 'affected', 'version': '1da177e4c3f41524e886b7f1b8a0c1fc7321cac2', 'lessThan': '063f43361e884acd7300790e90194430275d0d0c', 'versionType': 'git'}, {'status': 'affected', 'version': '1da177e4c3f41524e886b7f1b8a0c1fc7321cac2', 'lessThan': '726abf97566867f808fec9d8a408eb9698bd570a', 'versionType': 'git'}, {'status': 'affected', 'version': '1da177e4c3f41524e886b7f1b8a0c1fc7321cac2', 'lessThan': '367abcacc13a8e2e7624408b7f593bd1e60e49d9', 'versionType': 'git'}, {'status': 'affected', 'version': '1da177e4c3f41524e886b7f1b8a0c1fc7321cac2', 'lessThan': '5d634afb8b83b49de562792fd0d047416a43bd4d', 'versionType': 'git'}, {'status': 'affected', 'version': '1da177e4c3f41524e886b7f1b8a0c1fc7321cac2', 'lessThan': 'cea435ea7e868ea6fdf039bc4f2090c1d829b556', 'versionType': 'git'}, {'status': 'affected', 'version': '1da177e4c3f41524e886b7f1b8a0c1fc7321cac2', 'lessThan': '62443dc21114c0bbc476fa62973db89743f2f137', 'versionType': 'git'}, {'status': 'affected', 'version': '0', 'lessThan': '5.15.210', 'versionType': 'semver'}, {'status': 'affected', 'version': '0', 'lessThan': '6.1.176', 'versionType': 'semver'}, {'status': 'affected', 'version': '0', 'lessThan': '6.6.143', 'versionType': 'semver'}, {'status': 'affected', 'version': '0', 'lessThan': '6.12.94', 'versionType': 'semver'}, {'status': 'affected', 'version': '0', 'lessThan': '6.18.36', 'versionType': 'semver'}, {'status': 'affected', 'version': '0', 'lessThan': '7.0.13', 'versionType': 'semver'}], 'programFiles': ['net/ipv6/netfilter/ip6t_eui64.c', 'net/netfilter/ipset/ip_set_bitmap_ipmac.c', 'net/netfilter/ipset/ip_set_hash_ipmac.c', 'net/netfilter/ipset/ip_set_hash_mac.c', 'net/netfilter/nf_log_syslog.c', 'net/netfilter/xt_mac.c'], 'defaultStatus': 'unaffected'}, {'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'unaffected', 'version': '5.15.210', 'versionType': 'semver', 'lessThanOrEqual': '5.15.*'}, {'status': 'unaffected', 'version': '6.1.176', 'versionType': 'semver', 'lessThanOrEqual': '6.1.*'}, {'status': 'unaffected', 'version': '6.6.143', 'versionType': 'semver', 'lessThanOrEqual': '6.6.*'}, {'status': 'unaffected', 'version': '6.12.94', 'versionType': 'semver', 'lessThanOrEqual': '6.12.*'}, {'status': 'unaffected', 'version': '6.18.36', 'versionType': 'semver', 'lessThanOrEqual': '6.18.*'}, {'status': 'unaffected', 'version': '7.0.13', 'versionType': 'semver', 'lessThanOrEqual': '7.0.*'}, {'status': 'unaffected', 'version': '7.1', 'versionType': 'original_commit_for_fix', 'lessThanOrEqual': '*'}], 'programFiles': ['net/ipv6/netfilter/ip6t_eui64.c', 'net/netfilter/ipset/ip_set_bitmap_ipmac.c', 'net/netfilter/ipset/ip_set_hash_ipmac.c', 'net/netfilter/ipset/ip_set_hash_mac.c', 'net/netfilter/nf_log_syslog.c', 'net/netfilter/xt_mac.c'], 'defaultStatus': 'affected'}] [{'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '1da177e4c3f41524e886b7f1b8a0c1fc7321cac2', 'lessThan': '4435888e1bf139d2bfe5911643d4217382136743', 'versionType': 'git'}, {'status': 'affected', 'version': '1da177e4c3f41524e886b7f1b8a0c1fc7321cac2', 'lessThan': '063f43361e884acd7300790e90194430275d0d0c', 'versionType': 'git'}, {'status': 'affected', 'version': '1da177e4c3f41524e886b7f1b8a0c1fc7321cac2', 'lessThan': '726abf97566867f808fec9d8a408eb9698bd570a', 'versionType': 'git'}, {'status': 'affected', 'version': '1da177e4c3f41524e886b7f1b8a0c1fc7321cac2', 'lessThan': '367abcacc13a8e2e7624408b7f593bd1e60e49d9', 'versionType': 'git'}, {'status': 'affected', 'version': '1da177e4c3f41524e886b7f1b8a0c1fc7321cac2', 'lessThan': '5d634afb8b83b49de562792fd0d047416a43bd4d', 'versionType': 'git'}, {'status': 'affected', 'version': '1da177e4c3f41524e886b7f1b8a0c1fc7321cac2', 'lessThan': 'cea435ea7e868ea6fdf039bc4f2090c1d829b556', 'versionType': 'git'}, {'status': 'affected', 'version': '1da177e4c3f41524e886b7f1b8a0c1fc7321cac2', 'lessThan': '62443dc21114c0bbc476fa62973db89743f2f137', 'versionType': 'git'}], 'programFiles': ['net/ipv6/netfilter/ip6t_eui64.c', 'net/netfilter/ipset/ip_set_bitmap_ipmac.c', 'net/netfilter/ipset/ip_set_hash_ipmac.c', 'net/netfilter/ipset/ip_set_hash_mac.c', 'net/netfilter/nf_log_syslog.c', 'net/netfilter/xt_mac.c'], 'defaultStatus': 'unaffected'}, {'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '2.6.12'}, {'status': 'unaffected', 'version': '0', 'lessThan': '2.6.12', 'versionType': 'semver'}, {'status': 'unaffected', 'version': '5.15.210', 'versionType': 'semver', 'lessThanOrEqual': '5.15.*'}, {'status': 'unaffected', 'version': '6.1.176', 'versionType': 'semver', 'lessThanOrEqual': '6.1.*'}, {'status': 'unaffected', 'version': '6.6.143', 'versionType': 'semver', 'lessThanOrEqual': '6.6.*'}, {'status': 'unaffected', 'version': '6.12.94', 'versionType': 'semver', 'lessThanOrEqual': '6.12.*'}, {'status': 'unaffected', 'version': '6.18.36', 'versionType': 'semver', 'lessThanOrEqual': '6.18.*'}, {'status': 'unaffected', 'version': '7.0.13', 'versionType': 'semver', 'lessThanOrEqual': '7.0.*'}, {'status': 'unaffected', 'version': '7.1', 'versionType': 'original_commit_for_fix', 'lessThanOrEqual': '*'}], 'programFiles': ['net/ipv6/netfilter/ip6t_eui64.c', 'net/netfilter/ipset/ip_set_bitmap_ipmac.c', 'net/netfilter/ipset/ip_set_hash_ipmac.c', 'net/netfilter/ipset/ip_set_hash_mac.c', 'net/netfilter/nf_log_syslog.c', 'net/netfilter/xt_mac.c'], 'defaultStatus': 'affected'}] -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Jun. 28, 2026
Action Type Old Value New Value Added CVSS V3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H -
New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Jun. 25, 2026
Action Type Old Value New Value Added Affected [{'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '1da177e4c3f41524e886b7f1b8a0c1fc7321cac2', 'lessThan': '4435888e1bf139d2bfe5911643d4217382136743', 'versionType': 'git'}, {'status': 'affected', 'version': '1da177e4c3f41524e886b7f1b8a0c1fc7321cac2', 'lessThan': '063f43361e884acd7300790e90194430275d0d0c', 'versionType': 'git'}, {'status': 'affected', 'version': '1da177e4c3f41524e886b7f1b8a0c1fc7321cac2', 'lessThan': '726abf97566867f808fec9d8a408eb9698bd570a', 'versionType': 'git'}, {'status': 'affected', 'version': '1da177e4c3f41524e886b7f1b8a0c1fc7321cac2', 'lessThan': '367abcacc13a8e2e7624408b7f593bd1e60e49d9', 'versionType': 'git'}, {'status': 'affected', 'version': '1da177e4c3f41524e886b7f1b8a0c1fc7321cac2', 'lessThan': '5d634afb8b83b49de562792fd0d047416a43bd4d', 'versionType': 'git'}, {'status': 'affected', 'version': '1da177e4c3f41524e886b7f1b8a0c1fc7321cac2', 'lessThan': 'cea435ea7e868ea6fdf039bc4f2090c1d829b556', 'versionType': 'git'}, {'status': 'affected', 'version': '1da177e4c3f41524e886b7f1b8a0c1fc7321cac2', 'lessThan': '62443dc21114c0bbc476fa62973db89743f2f137', 'versionType': 'git'}, {'status': 'affected', 'version': '0', 'lessThan': '5.15.210', 'versionType': 'semver'}, {'status': 'affected', 'version': '0', 'lessThan': '6.1.176', 'versionType': 'semver'}, {'status': 'affected', 'version': '0', 'lessThan': '6.6.143', 'versionType': 'semver'}, {'status': 'affected', 'version': '0', 'lessThan': '6.12.94', 'versionType': 'semver'}, {'status': 'affected', 'version': '0', 'lessThan': '6.18.36', 'versionType': 'semver'}, {'status': 'affected', 'version': '0', 'lessThan': '7.0.13', 'versionType': 'semver'}], 'programFiles': ['net/ipv6/netfilter/ip6t_eui64.c', 'net/netfilter/ipset/ip_set_bitmap_ipmac.c', 'net/netfilter/ipset/ip_set_hash_ipmac.c', 'net/netfilter/ipset/ip_set_hash_mac.c', 'net/netfilter/nf_log_syslog.c', 'net/netfilter/xt_mac.c'], 'defaultStatus': 'unaffected'}, {'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'unaffected', 'version': '5.15.210', 'versionType': 'semver', 'lessThanOrEqual': '5.15.*'}, {'status': 'unaffected', 'version': '6.1.176', 'versionType': 'semver', 'lessThanOrEqual': '6.1.*'}, {'status': 'unaffected', 'version': '6.6.143', 'versionType': 'semver', 'lessThanOrEqual': '6.6.*'}, {'status': 'unaffected', 'version': '6.12.94', 'versionType': 'semver', 'lessThanOrEqual': '6.12.*'}, {'status': 'unaffected', 'version': '6.18.36', 'versionType': 'semver', 'lessThanOrEqual': '6.18.*'}, {'status': 'unaffected', 'version': '7.0.13', 'versionType': 'semver', 'lessThanOrEqual': '7.0.*'}, {'status': 'unaffected', 'version': '7.1', 'versionType': 'original_commit_for_fix', 'lessThanOrEqual': '*'}], 'programFiles': ['net/ipv6/netfilter/ip6t_eui64.c', 'net/netfilter/ipset/ip_set_bitmap_ipmac.c', 'net/netfilter/ipset/ip_set_hash_ipmac.c', 'net/netfilter/ipset/ip_set_hash_mac.c', 'net/netfilter/nf_log_syslog.c', 'net/netfilter/xt_mac.c'], 'defaultStatus': 'affected'}] Added Description In the Linux kernel, the following vulnerability has been resolved: netfilter: require Ethernet MAC header before using eth_hdr() `ip6t_eui64`, `xt_mac`, the `bitmap:ip,mac`, `hash:ip,mac`, and `hash:mac` ipset types, and `nf_log_syslog` access `eth_hdr(skb)` after either assuming that the skb is associated with an Ethernet device or checking only that the `ETH_HLEN` bytes at `skb_mac_header(skb)` lie between `skb->head` and `skb->data`. Make these paths first verify that the skb is associated with an Ethernet device, that the MAC header was set, and that it spans at least a full Ethernet header before accessing `eth_hdr(skb)`. Added Reference https://git.kernel.org/stable/c/063f43361e884acd7300790e90194430275d0d0c Added Reference https://git.kernel.org/stable/c/367abcacc13a8e2e7624408b7f593bd1e60e49d9 Added Reference https://git.kernel.org/stable/c/4435888e1bf139d2bfe5911643d4217382136743 Added Reference https://git.kernel.org/stable/c/5d634afb8b83b49de562792fd0d047416a43bd4d Added Reference https://git.kernel.org/stable/c/62443dc21114c0bbc476fa62973db89743f2f137 Added Reference https://git.kernel.org/stable/c/726abf97566867f808fec9d8a408eb9698bd570a Added Reference https://git.kernel.org/stable/c/cea435ea7e868ea6fdf039bc4f2090c1d829b556
EPSS is a daily estimate of the probability of exploitation activity
being observed over the next 30 days. Following chart shows the EPSS
score history of the vulnerability.