CVE-2026-53245

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the mrp pdu parse vecattr() function regarding the parsing of vector attribute events. The parser fails to decrement the valen variable after processing the third event of a byte, which can lead to the consumption of an extra byte and the application of a spurious event to the MRP applicant state when valen is a multiple of three. Furthermore, when valen is zero, the parser incorrectly consumes attrlen bytes as FirstValue, corrupting the offset for subsequent PDU parsing. Additionally, when valen exceeds three, the attribute value is not incremented between byte boundaries, causing the first event of a new byte to reuse the value of the third event from the previous byte.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.