CVE-2026-53223

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the network subsystem where the skb is err queue() function incorrectly identifies AF PACKET sockets as error-queue skbs because it relies solely on the PACKET OUTGOING marker. When timestamping is enabled and SO RXQ OVFL is active, the system may misinterpret AF PACKET control-buffer state as sock exterr skb::opt stats. If the packet drop counter is odd, the path emits SCM TIMESTAMPING OPT STATS using skb->len and skb->data. For non-linear skbs, this process can copy data beyond the linear head, potentially triggering hardened usercopy or disclosing adjacent heap contents.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.