CVE-2026-53219

A flaw was found in the Linux kernel's netfilter x_tables component. This vulnerability allows for information disclosure due to improper handling of percpu counter pointers during the copying of rule entry headers to userspace. A local attacker could exploit this by causing a fault in a userspace buffer, leading to the exposure of internal kernel memory addresses.

This vulnerability is rated as Moderate severity because exploitation requires local system access and is restricted to leaking internal kernel pointers, which can aid in bypassing kernel address space layout randomization (KASLR) without directly enabling arbitrary code execution or denial of service. On default Red Hat Enterprise Linux environments, triggering the flawed get-entries socket operations requires local network administration privileges (CAP_NET_ADMIN) or the ability to create unprivileged user namespaces. Additionally, modern distributions default to nftables, limiting the active exposure of legacy netfilter x_tables interfaces in typical configurations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.