CVE-2026-53220

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the netfilter component where the ebt redirect tg() function dereferences the return value of br port get rcu() without a NULL check. This can lead to a kernel panic if a bridge port is removed between the original hook invocation and an NFQUEUE reinject. Additionally, if userspace moves the device to a different virtual device, such as macvlan, the packet cannot be reinjected into the bridge path and must be dropped.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.