CVE-2026-53014

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the tcf blockcast redir() function where the mac header xmit flag is queried from the incorrect device when iterating through block ports to redirect packets. The system queries dev is mac header xmit(dev) for the next device in the iteration instead of the current device being sent to (dev prev). This leads to incorrect decisions in tcf mirred to dev() regarding whether to push or pull the MAC header. In environments with mixed device types, such as ethernet veth and tunnel devices, this results in skb header corruption. In severe cases, skb push rcsum() may be called with an incorrect mac len, potentially exhausting headroom and causing a system panic.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.