CVE-2026-53249

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description Unprivileged applications can set Loose Source and Record Route (LSRR) and Strict Source and Record Route (SSRR) IP options. This allows an attacker to force packets to route through controlled nodes, potentially leaking the TCP Initial Sequence Number (ISN) and other protocol information. The issue involves the IPOPT SSRR and IPOPT LSRR options.

Recommendations Restrict the ability to set IPOPT SSRR and IPOPT LSRR options to users with the CAP NET RAW capability.