In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: make ebt_snat ARP rewrite writable The ebtables SNAT target keeps the Ethernet source address rewrite behind s…
High CVSS 8.8
Summary
In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: make ebt_snat ARP rewrite writable The ebtables SNAT target keeps the Ethernet source address rewrite behind skb_ensure_writable(skb, 0). This is intentional: at the bridge ebtables hooks the Ethernet header is addressed through skb_mac_header()/eth_hdr(), while skb->data points at the Ethernet payload. Asking skb_ensure_writable() for ETH_HLEN bytes would check the payload, not the Ethernet header, and w…
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/153ea96c806aea395daba907a4f88480b6ad5093 Patch
- https://git.kernel.org/stable/c/67ba971ae02514d85818fe0c32549ab4bfa3bf49 Patch
- https://git.kernel.org/stable/c/76280b78cc9f23bdc6438e10ad6dff148ef8375b Patch
- https://git.kernel.org/stable/c/afd64b59c3de9bbbdd3759e834fdc55cda716e0b Patch
- https://git.kernel.org/stable/c/b18675263db1147c8e1cab625400c13a0d87bd2d Patch
- https://git.kernel.org/stable/c/b7e91939ba9be805a62a257fa4e227dffbb88fa0 Patch
- https://git.kernel.org/stable/c/bf84ad7c7a9ede46e31afaa41a1ba06a159e8c87 Patch
- https://git.kernel.org/stable/c/c9b5ff59feffb92a147a84a5aa28acd2cb8ff4c5 Patch
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-53266
Timeline
- nvd_ingest NVD