CVE-2026-53238

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the netlabel component where the netlbl unlabel addrinfo get() function fails to independently validate the length of the mask attribute. While the function uses the address attribute length to distinguish between IPv4 and IPv6 addresses, a specially crafted Generic Netlink request can provide a valid address attribute paired with a shorter mask attribute. This allows the shorter mask to be incorrectly read as a full struct in addr or struct in6 addr. This occurs because NLA BINARY policy lengths are treated as maximum lengths by default rather than exact lengths.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.