CVE-2026-53074

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the bpf prog test run skb() function where the system may access ip hdr(skb) or ipv6 hdr(skb) even if the provided test input contains only an Ethernet header. This occurs because the function calls eth type trans() and uses skb->protocol to initialize family and address fields without first verifying if the Layer 3 (L3) header is sufficiently long for IPv4 or IPv6 packets.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.