CVE-2026-53134

A flaw was found in the Linux kernel's netfilter component. This vulnerability, a stale stack leak, occurs when certain network filtering operations do not properly clear memory. An attacker could potentially exploit this to access sensitive information from the kernel's memory, leading to information disclosure.

This vulnerability is evaluated as having a Moderate impact because exploitation is confined to local kernel information disclosure and requires either administrative privileges or unprivileged user namespace access to define vulnerable nftables rules. In typical Red Hat Enterprise Linux environments, triggering the leak requires unprivileged user namespaces to be enabled or an existing firewall configuration that evaluates nftables FIB expressions and exposes destination registers. Although leaking uninitialized stack data may assist in defeating kernel address space layout randomization (KASLR), the bug cannot directly modify system memory or execute arbitrary code, precluding an Important rating.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.