CVE-2026-53236

5.5 Moyenne

Publiée le 25/06/2026 à 11:16 · Modifiée le 15/10/2026 à 04:20 · Modifiée · Source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Description

In the Linux kernel, the following vulnerability has been resolved: tcp: restrict SO_ATTACH_FILTER to priv users This patch restricts the use of SO_ATTACH_FILTER (cBPF) on TCP sockets to users with CAP_NET_ADMIN capability. This blocks potential side-channel attack where an unprivileged application attaches a filter to leak TCP sequence/acknowledgment numbers.

Traduire en français

Produits concernés

Linux
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP
Linux linux kernel

Scores CVSS

Version	Score	Source	Vecteur
3.1	5.5 Moyenne	nvd@nist.gov (NVD)	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H`

Références

https://git.kernel.org/stable/c/3747de241a66ef2c7032d2cc2b826a47c5fa0f6a Patch
https://git.kernel.org/stable/c/5d39580f68e6ddeedd15e587282207489dfb3da2 Patch
https://git.kernel.org/stable/c/82b3e7ce10c53fc12aab8904745603efc74f8c07 Patch
https://git.kernel.org/stable/c/c68517a3e18e20997808821c5559d0cba4d776c1 Patch
https://git.kernel.org/stable/c/ecfe9171b26ae3eed0cd8bab7a943e9e2c9e51ba Patch
https://git.kernel.org/stable/c/ede69b8f6670600e534591664584f810d7c385f9 Patch
https://cert-portal.siemens.com/productcert/html/ssa-019113.html
https://cert-portal.siemens.com/productcert/html/ssa-457936.html
https://cert-portal.siemens.com/productcert/html/ssa-784472.html

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories