{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-53074", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-06-09T07:44:35.383Z", "datePublished": "2026-06-24T16:30:15.337Z", "dateUpdated": "2026-06-24T16:30:15.337Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-06-24T16:30:15.337Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb\n\nbpf_prog_test_run_skb() calls eth_type_trans() first and then uses\nskb->protocol to initialize sk family and address fields for the test\nrun.\n\nFor IPv4 and IPv6 packets, it may access ip_hdr(skb) or ipv6_hdr(skb)\neven when the provided test input only contains an Ethernet header.\n\nReject the input earlier if the Ethernet frame carries IPv4/IPv6\nEtherType but the L3 header is too short.\n\nFold the IPv4/IPv6 header length checks into the existing protocol\nswitch and return -EINVAL before accessing the network headers."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/bpf/test_run.c"], "versions": [{"version": "fa5cb548ced61b9d3095f32f8a7e427a248c65ee", "lessThan": "7254267799d083280c0e53effc101a33add95f7b", "status": "affected", "versionType": "git"}, {"version": "fa5cb548ced61b9d3095f32f8a7e427a248c65ee", "lessThan": "6a9f38d5ff11e00bc54baab752642978805e81eb", "status": "affected", "versionType": "git"}, {"version": "fa5cb548ced61b9d3095f32f8a7e427a248c65ee", "lessThan": "e6aa481f21fc7a41ed344767ea25aae9d03fae71", "status": "affected", "versionType": "git"}, {"version": "fa5cb548ced61b9d3095f32f8a7e427a248c65ee", "lessThan": "0a04db240effd85773f66244645a28cedddb72d2", "status": "affected", "versionType": "git"}, {"version": "fa5cb548ced61b9d3095f32f8a7e427a248c65ee", "lessThan": "1f882c492d46f90bdb36f4936876c88c28dab21c", "status": "affected", "versionType": "git"}, {"version": "fa5cb548ced61b9d3095f32f8a7e427a248c65ee", "lessThan": "8042240412de3222d27b31e89d29336961cad9e4", "status": "affected", "versionType": "git"}, {"version": "fa5cb548ced61b9d3095f32f8a7e427a248c65ee", "lessThan": "6def5fe753cbe5b279ee5fd10327b2611cbddaca", "status": "affected", "versionType": "git"}, {"version": "fa5cb548ced61b9d3095f32f8a7e427a248c65ee", "lessThan": "12bec2bd4b76d81c5d3996bd14ec1b7f4d983747", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/bpf/test_run.c"], "versions": [{"version": "5.9", "status": "affected"}, {"version": "0", "lessThan": "5.9", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.258", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.209", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.175", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.141", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.91", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.33", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0.10", "lessThanOrEqual": "7.0.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.9", "versionEndExcluding": "5.10.258"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.9", "versionEndExcluding": "5.15.209"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.9", "versionEndExcluding": "6.1.175"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.9", "versionEndExcluding": "6.6.141"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.9", "versionEndExcluding": "6.12.91"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.9", "versionEndExcluding": "6.18.33"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.9", "versionEndExcluding": "7.0.10"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.9", "versionEndExcluding": "7.1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/7254267799d083280c0e53effc101a33add95f7b"}, {"url": "https://git.kernel.org/stable/c/6a9f38d5ff11e00bc54baab752642978805e81eb"}, {"url": "https://git.kernel.org/stable/c/e6aa481f21fc7a41ed344767ea25aae9d03fae71"}, {"url": "https://git.kernel.org/stable/c/0a04db240effd85773f66244645a28cedddb72d2"}, {"url": "https://git.kernel.org/stable/c/1f882c492d46f90bdb36f4936876c88c28dab21c"}, {"url": "https://git.kernel.org/stable/c/8042240412de3222d27b31e89d29336961cad9e4"}, {"url": "https://git.kernel.org/stable/c/6def5fe753cbe5b279ee5fd10327b2611cbddaca"}, {"url": "https://git.kernel.org/stable/c/12bec2bd4b76d81c5d3996bd14ec1b7f4d983747"}], "title": "bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{}

{"bugzilla": {"description": "kernel: bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb", "id": "2492441", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492441"}, "csaw": false, "cvss3": {"cvss3_base_score": "6.4", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "status": "draft"}, "cwe": "CWE-1284", "details": ["A flaw was found in the Linux kernel's BPF (Berkeley Packet Filter) subsystem. Specifically, the `bpf_prog_test_run_skb()` function, responsible for testing BPF programs with network packets, did not properly validate the length of IPv4 and IPv6 inputs. This could allow the kernel to attempt to access network header information even when the provided packet data was too short, potentially leading to system instability or unexpected behavior."], "name": "CVE-2026-53074", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-06-24T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-53074\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-53074\nhttps://lore.kernel.org/linux-cve-announce/2026062405-CVE-2026-53074-fb09@gregkh/T"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[fa5cb548ced61b9d3095f32f8a7e427a248c65ee,7254267799d083280c0e53effc101a33add95f7b)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[fa5cb548ced61b9d3095f32f8a7e427a248c65ee,6a9f38d5ff11e00bc54baab752642978805e81eb)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[fa5cb548ced61b9d3095f32f8a7e427a248c65ee,e6aa481f21fc7a41ed344767ea25aae9d03fae71)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[fa5cb548ced61b9d3095f32f8a7e427a248c65ee,0a04db240effd85773f66244645a28cedddb72d2)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[fa5cb548ced61b9d3095f32f8a7e427a248c65ee,1f882c492d46f90bdb36f4936876c88c28dab21c)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[fa5cb548ced61b9d3095f32f8a7e427a248c65ee,8042240412de3222d27b31e89d29336961cad9e4)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[fa5cb548ced61b9d3095f32f8a7e427a248c65ee,6def5fe753cbe5b279ee5fd10327b2611cbddaca)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[fa5cb548ced61b9d3095f32f8a7e427a248c65ee,12bec2bd4b76d81c5d3996bd14ec1b7f4d983747)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "5.9"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,5.9)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[5.10.258,5.11.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[5.15.209,5.16.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.1.175,6.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.141,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.91,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.33,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.0.10,7.1.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.1,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-06-24T19:30:08.640687+00:00", "updated": "2026-06-26T05:45:04.996142+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}