CVE-2026-53070

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the SCTP implementation where Bottom Half (BH) processing is not disabled before calling the udp tunnel xmit skb() and udp tunnel6 xmit skb() functions. These functions are expected to run with BH disabled to ensure that the dev xmit recursion inc() and dev xmit recursion dec() functions remain balanced on the same CPU. Without the use of local bh disable(), the execution context may migrate between CPUs, breaking the recursion pairing. This can result in incorrect recursion level detection, leading to packet drops within the ip(6) tunnel xmit() or dev queue xmit() functions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.