CVE-2026-53366

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds write issue exists in the ipv4 component of the Linux kernel. The problem occurs in the ip append data() function when the paged-allocation branch is taken. Specifically, the alloclen and pagedlen variables are computed without properly accounting for fraggap (fragmentation gap). This results in the linear area of the new skb (socket buffer) being undersized by fraggap bytes, while pagedlen is overstated by the same amount. Exploitation of this issue could allow an attacker to elevate privileges or cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.