SECURELYN
Free ScanFree consultation

CVE-2026-53266

In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: make ebt_snat ARP rewrite writable The ebtables SNAT target keeps the Ethernet source address rewrite behind skb_ensure_writable(skb, 0). This is intentional: at the bridge ebtables hooks the Ethernet header is addressed through skb_mac_header()/eth_hdr(), while skb-data points at the Ethernet payload. Asking skb_ensure_writable() for ETH_HLEN bytes would check the payload, not the Ethernet header, and would reintroduce the small packet regression fixed by commit 63137bc5882a. However, the optional ARP send…

Scores

8.8
CVSS 8.8 out of 10, high severity.
0.8%
EPSS 0.8% chance of exploitation in the next 30 days.

The facts

Published
25 June 2026
Last changed
19 September 2026
NVD status
Analyzed
Severity
High, CVSS 8.8 out of 10 (version 3.1)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Weakness
Affects
  • linux linux kernel
Known exploited
Yes. CISA added it to the Known Exploited Vulnerabilities catalogue on 18 September 2026.
EPSS
0.8% chance of exploitation activity in the next 30 days (percentile 57).

Is there a Securelyn advisory?

Not yet. Securelyn writes plain-English advisories for the flaws that matter most to businesses. Subscribe to the digest to hear about them.

References