CVE-2026-53216: net: mvpp2: limit XDP frame size to the RX buffer
In the Linux kernel, the following vulnerability has been resolved:
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.180-1Fixed in 6.12.94-1Fixed in 6.12.101-1Fixed in 7.1.8-1Fixed in 7.1.8-2 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.180-1~deb11u1 - Configuration
Update mvpp2 XDP buffer initialization so each xdp_buff uses bm_pool->frag_size as the frame size, ensuring XDP tailroom and bpf_xdp_adjust_tail() tail growth validation match the actual RX buffer allocation (rather than using PAGE_SIZE).
Linux kernel (net: mvpp2) XDP frame size initialization = bm_pool->frag_size (instead of PAGE_SIZE)
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53216?
CVE-2026-53216 has a critical severity rating of 9.8.
How do I fix CVE-2026-53216?
To fix CVE-2026-53216, apply the available patch from the Linux kernel repository.
What type of vulnerability is CVE-2026-53216?
CVE-2026-53216 is a vulnerability affecting the Linux kernel's networking component related to XDP frame size.
Which systems are affected by CVE-2026-53216?
CVE-2026-53216 affects systems running the Linux kernel and specifically the mvpp2 driver.
What are the potential impacts of CVE-2026-53216?
Exploitation of CVE-2026-53216 could lead to buffer overflows, which may compromise system integrity and security.