CVE-2026-53353: hsr: Remove WARN_ONCE() in hsr_addr_is_self().
hsr: Remove WARNONCE() in hsraddrisself().
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.143.1-1 - Configuration
In net/hsr/hsr_framereg.c, remove the WARN_ONCE() call from hsr_addr_is_self() (hsr_addr_is_self+0x211/0x3f0 at line 39) to resolve the reported warning.
Linux kernel (net/hsr/hsr_framereg.c) Remove WARN_ONCE() in hsr_addr_is_self() = disabled
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53353?
CVE-2026-53353 has a severity rating of 10, indicating a critical vulnerability.
How do I fix CVE-2026-53353?
To fix CVE-2026-53353, update your Linux kernel to the latest patched version that addresses this vulnerability.
What impact does CVE-2026-53353 have on system security?
CVE-2026-53353 potentially exposes systems to instability and unexpected behaviors due to incorrect assumptions in the code.
Which software is affected by CVE-2026-53353?
CVE-2026-53353 affects the Linux kernel, specifically related to the handling of self nodes in HSR.
When was CVE-2026-53353 published?
CVE-2026-53353 was published on July 1, 2026.