Riskcovery

CVE-2026-53001

netfilter: xtables: restrict several matches to inet family

State
Published
Severity
Not scored
Published
Jun 24, 2026
Updated
Oct 15, 2026
Reserved
Jun 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: xtables: restrict several matches to inet family

This is a partial revert of:

commit ab4f21e6fb1c ("netfilter: xtables: use NFPROTO_UNSPEC in more extensions")

to allow ipv4 and ipv6 only.

- xt_mac - xt_owner - xt_physdev

These extensions are not used by ebtables in userspace.

Moreover, xt_realm is only for ipv4, since dst->tclassid is ipv4 specific.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • ab4f21e6fb1c09b13c4c3cb8357babe8223471bd to before 14203f9edf944b3fb63faadd62f38452421ecdfcAffected
  • ab4f21e6fb1c09b13c4c3cb8357babe8223471bd to before 7eaf9c740f33230cb224dc265f3c69f8531ff57bAffected
  • ab4f21e6fb1c09b13c4c3cb8357babe8223471bd to before 9a109751b297b0f2135495749ef5a18ba31ec7d4Affected
  • ab4f21e6fb1c09b13c4c3cb8357babe8223471bd to before cbeb259f31382de70a70a59ffd0e66f5e80d9818Affected
  • ab4f21e6fb1c09b13c4c3cb8357babe8223471bd to before 689a91ff18d6448d94c1ab7c076fecdb2b668befAffected
  • ab4f21e6fb1c09b13c4c3cb8357babe8223471bd to before 76160e04440c9698b989dbd9492a7ec4f520c9eeAffected
  • ab4f21e6fb1c09b13c4c3cb8357babe8223471bd to before fa88161ef56e29bdaa05cc89dbc4ee221e94bfe9Affected
  • ab4f21e6fb1c09b13c4c3cb8357babe8223471bd to before b6fe26f86a1649f84e057f3f15605b08eda15497Affected
LinuxLinux
  • 2.6.28Affected
  • before 2.6.28Not affected
  • 5.10.258 through 5.10.*Not affected
  • 5.15.209 through 5.15.*Not affected
  • 6.1.175 through 6.1.*Not affected
  • 6.6.141 through 6.6.*Not affected
  • 6.12.91 through 6.12.*Not affected
  • 6.18.33 through 6.18.*Not affected
  • 7.0.10 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.