CVE-2026-53219

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the netfilter x tables component where the native and compat get-entries paths copy the fixed rule entry header from the kernelized rule blob to userspace before overwriting the counter fields with a sanitized snapshot. On SMP (Symmetric Multiprocessing) kernels, the entry->counters.pcnt variable contains the percpu allocation address used by x tables rule counters. If a caller provides a userspace buffer that faults during the initial fixed-header copy after pcnt has been copied but before the sanitized copy occurs, the system call returns -EFAULT and leaves the raw percpu pointer in userspace, leading to an information leak.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.