CVE-2026-53111: bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmit_push_encap
bpf: testrun: Fix the null pointer dereference issue in bpflwtxmitpushencap
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.143.1-1 - Configuration
Temporarily add the setting of skb->_skb_refdst before bpf_test_run to resolve the null pointer dereference when bpf_lwt_push_ip_encap/bpf_lwt_xmit_push_encap accesses skb_dst(skb)->dev.
Linux kernel (BPF lwt helpers) skb->_skb_refdst temporary initialization before bpf_test_run = set skb->_skb_refdst before bpf_test_run (before accessing skb_dst(skb)->dev in bpf_lwt_xmit_push_encap) - Configuration
Ensure the bpf_lwt_xmit_push_encap helper can access skb_dst(skb)->dev during bpf_test_run by initializing skb->_skb_refdst before the test run.
Linux kernel (BPF lwt helpers) skb_dst(skb)->dev availability for bpf_lwt_xmit_push_encap during bpf_test_run = ensure skb_dst(skb)->dev is accessible (via skb->_skb_refdst initialization)
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53111?
CVE-2026-53111 has a risk score of 38, indicating a moderate level of severity.
What type of vulnerability is CVE-2026-53111?
CVE-2026-53111 is categorized as a null pointer dereference vulnerability in the Linux kernel.
How do I fix CVE-2026-53111?
To fix CVE-2026-53111, update the Linux kernel to the latest version where this vulnerability has been resolved.
Which component of the Linux kernel is affected by CVE-2026-53111?
CVE-2026-53111 affects the bpf_lwt_xmit_push_encap helper function in the Linux kernel.
What is the consequence of exploiting CVE-2026-53111?
Exploiting CVE-2026-53111 can lead to a null pointer dereference, potentially causing a denial of service.