exploitDog

CVE-2026-53236

Опубликовано: 25 июн. 2026

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

In the Linux kernel, the following vulnerability has been resolved:

tcp: restrict SO_ATTACH_FILTER to priv users

This patch restricts the use of SO_ATTACH_FILTER (cBPF) on TCP sockets to users with CAP_NET_ADMIN capability.

This blocks potential side-channel attack where an unprivileged application attaches a filter to leak TCP sequence/acknowledgment numbers.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 2.6.12.1 (включая) до 6.1.176 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.2 (включая) до 6.6.143 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.7 (включая) до 6.12.94 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.13 (включая) до 6.18.36 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.19 (включая) до 7.0.13 (исключая)

cpe:2.3:o:linux:linux_kernel:2.6.12:-:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:7.1:rc4:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:7.1:rc5:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:7.1:rc6:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:7.1:rc7:*:*:*:*:*:*

EPSS

Процентиль: 2%

0.00123

Низкий

5.5 Medium

CVSS3

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2026-53236

CVSS3: 5.5

ubuntu

около 1 месяца назад

In the Linux kernel, the following vulnerability has been resolved: tcp: restrict SO_ATTACH_FILTER to priv users This patch restricts the use of SO_ATTACH_FILTER (cBPF) on TCP sockets to users with CAP_NET_ADMIN capability. This blocks potential side-channel attack where an unprivileged application attaches a filter to leak TCP sequence/acknowledgment numbers.

CVE-2026-53236

CVSS3: 7

redhat

около 1 месяца назад

In the Linux kernel, the following vulnerability has been resolved: tcp: restrict SO_ATTACH_FILTER to priv users This patch restricts the use of SO_ATTACH_FILTER (cBPF) on TCP sockets to users with CAP_NET_ADMIN capability. This blocks potential side-channel attack where an unprivileged application attaches a filter to leak TCP sequence/acknowledgment numbers.

CVE-2026-53236

CVSS3: 7

msrc

около 1 месяца назад

tcp: restrict SO_ATTACH_FILTER to priv users

CVE-2026-53236

CVSS3: 5.5

debian

около 1 месяца назад

In the Linux kernel, the following vulnerability has been resolved: t ...

GHSA-jmmv-2hp7-p7g5

CVSS3: 5.5

github

около 1 месяца назад

In the Linux kernel, the following vulnerability has been resolved: tcp: restrict SO_ATTACH_FILTER to priv users This patch restricts the use of SO_ATTACH_FILTER (cBPF) on TCP sockets to users with CAP_NET_ADMIN capability. This blocks potential side-channel attack where an unprivileged application attaches a filter to leak TCP sequence/acknowledgment numbers.

EPSS

Процентиль: 2%

0.00123

Низкий

5.5 Medium

CVSS3

Дефекты

NVD-CWE-noinfo