CVE-2026-53074: bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb
Published Jun 24, 2026
·Updated
bpf: reject short IPv4/IPv6 inputs in bpfprogtestrunskb
Affected Software
9 affected componentsFixes available
Linux Linux kernel
Microsoft azl3 kernel 6.6.139.1-1<6.6.143.1-1
6.6.143.1-1
Linux Linux kernel>=5.9<5.10.258
Linux Linux kernel>=5.11<5.15.209
Linux Linux kernel>=5.16<6.1.175
Linux Linux kernel>=6.2<6.6.141
Linux Linux kernel>=6.7<6.12.91
Linux Linux kernel>=6.13<6.18.33
Linux Linux kernel>=6.19<7.0.10
Remediation
Event History
Jun 24, 2026
CVE Published
via MITRE·04:30 PM
Data Sourced
via MITRE·04:30 PM
Description
Data Sourced
via NVD·05:17 PM
RemedyDescriptionSeverityAffected Software
Jun 27, 2026
Data Sourced
via Microsoft·08:16 AM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·08:16 AM
Affected Software
Updated
via Microsoft·08:16 AM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2026-53074?
The severity of CVE-2026-53074 is rated at 27.
2
How do I fix CVE-2026-53074?
To fix CVE-2026-53074, ensure that your Linux kernel is updated to the latest stable version that includes the patch for this vulnerability.
3
What type of vulnerability is CVE-2026-53074?
CVE-2026-53074 is a vulnerability in the Linux kernel related to the improper handling of short IPv4 and IPv6 inputs in the bpf_prog_test_run_skb function.
4
Is CVE-2026-53074 exploitable?
Yes, CVE-2026-53074 can be exploited to potentially compromise the system's network stack due to incorrect input handling.
5
Which software is affected by CVE-2026-53074?
CVE-2026-53074 affects the Linux kernel, specifically in the context of the BPF (Berkeley Packet Filter) implementation.