PT-2026-51894 · Linux+3 · Linux Kernel+3

·

CVE-2026-53000

·

Published

2026-04-21

·

Updated

2026-09-08

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A flaw exists in the netfilter component of the Linux kernel, specifically within the Network Address Translation (NAT) subsystem. The issue stems from improper memory management when releasing network filter operation structures. This can lead to a system crash resulting in a Denial of Service (DoS) or the unauthorized exposure of sensitive internal hook data during error handling. The problem is particularly relevant when dumping active netfilter hooks from userspace, as the nf nat register fn() function may partially expose hooks during the error path.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2026:64808
AZL-90372
BDU:2026-13945
CVE-2026-53000
OESA-2026-3204
OPENSUSE-SU-2026:21555-1
SUSE-SU-2026:23066-1
SUSE-SU-2026:23068-1
SUSE-SU-2026:23193-1
SUSE-SU-2026:23194-1
SUSE-SU-2026:23221-1
SUSE-SU-2026:23231-1
SUSE-SU-2026:23237-1
SUSE-SU-2026:23241-1
SUSE-SU-2026:23244-1
SUSE-SU-2026:3790-1
SUSE-SU-2026:3810-1
USN-8566-1
USN-8568-1
USN-8569-1
USN-8593-1
USN-8603-1
USN-8618-1
USN-8663-1
USN-8664-1
USN-8728-1

Affected Products

Linuxmint
Linux Kernel
Rocky Linux
Ubuntu