CVE-2026-53220

A flaw was found in the Linux kernel's netfilter component. A local attacker could exploit a NULL pointer dereference vulnerability in the ebt_redirect_tg() function. This occurs when a bridge port is removed and a packet is reinjected into NFQUEUE, leading to a kernel panic and a Denial of Service (DoS) for the system.

This vulnerability is rated as Moderate impact because exploitation is restricted to local access and causes a system denial of service without compromising data confidentiality or integrity. Exploitation requires specific netfilter configurations where packets are processed through user-space queue targets on a network bridge while the underlying bridge port is detached or moved. Typical Red Hat Enterprise Linux installations do not employ this combination of bridge netfilter queuing, limiting exposure under standard deployment profiles.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.