CVE-2026-53221

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ip6 vti module where the vti6 tnl lookup() function fails to correctly validate tunnels during fallback searches. When an exact tunnel match fails, the system searches for wildcard tunnels matching either the local address (wildcard remote) or the remote address (wildcard local). Because all tunnel types are stored in the same hash table ip6n->tnls r l, which is susceptible to hash collisions, the fallback search loops may incorrectly identify a tunnel as a match if they do not verify that the candidate tunnel actually possesses a wildcard address.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.