CVE-2026-53211

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A stale stack leak exists in the netfilter module. The NFT META BRI IIFHWADDR declares a destination register length of 6 bytes, which is rounded up to 8 bytes by the register-init tracking. The function nft meta bridge get eval() performs a memcpy() of only 6 bytes, leaving the remaining 2 bytes of the second register uninitialized. This allows a downstream load of the register span to leak uninitialized stack data from nft do chain() to userspace.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.