CVE-2026-53002

A flaw was found in the Linux kernel's netfilter conntrack module. This vulnerability arises from the use of sprintf and insufficient buffer sizing in the mangle_content_len() function, which can lead to a stack-out-of-bounds write. An attacker could potentially exploit this memory corruption issue to cause a denial of service or other unspecified impacts.

An Important flaw was found in the Linux kernel's netfilter conntrack helper for SIP. A local attacker with low privileges could trigger a stack-out-of-bounds write by sending specially crafted SIP messages, potentially leading to a denial of service or privilege escalation. This vulnerability requires the system to process SIP traffic through netfilter.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the nf_conntrack_sip and nf_nat_sip modules from being loaded. See https://access.redhat.com/solutions/41278 for instructions.