Linux Kernel Out-of-Bounds Write Vulnerability

Fri, 18 Sep 2026 00:00:00 +0000

🚨SEVERITY: HIGH — CVSS 8.8Security Advisory

TL;DR 📌

Linux Kernel contains an out-of-bounds write vulnerability in the ebtables SNAT target which allows an ARP sender hardware address rewrite to write directly into a nonlinear socket-buffer fragment backed by a splice-imported file page. The impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported…
Highest CVSS: 8.8 (High).
Listed in CISA KEV (2026-09-18) — this is being exploited in the wild.
Fixed in 5.10.259, 5.15.210, 5.5, 5.9 — upgrade to this release or later.
CVEs: CVE-2026-53266.

What it is

CVE-2026-53266 is an out-of-bounds write in the Linux kernel’s netfilter bridge code, specifically in the ebtables SNAT target’s optional ARP sender hardware address (SHA) rewrite.

Linux Kernel Race Condition Vulnerability

Fri, 18 Sep 2026 00:00:00 +0000

🚨SEVERITY: HIGH — CVSS 7.8Security Advisory

TL;DR 📌

Linux Kernel contains a race condition vulnerability which allows concurrent writes to the same AF_ALG socket causing data to be unpredictably interleaved and creating inconsistencies in the socket’s internal state.
Highest CVSS: 7.8 (High).
Listed in CISA KEV (2026-09-18) — this is being exploited in the wild.
Fixed in 5.10.245, 5.15.194, 6.1.154, 6.12.49 — upgrade to this release or later.
CVEs: CVE-2025-39964.

What it is

CVE-2025-39964 is a race condition in the Linux kernel’s AF_ALG socket interface, the interface the kernel crypto API exposes to userspace (used via af_alg, the same layer that underpins tools such as AF_ALG-based crypto acceleration). The bug sits in af_alg_sendmsg.

Linux on PhllapsNET

Linux Kernel Out-of-Bounds Write Vulnerability

TL;DR 📌

What it is

Linux Kernel Race Condition Vulnerability

TL;DR 📌

What it is