CVE-2026-53249

A flaw was found in the Linux kernel's IPv4 networking component. This vulnerability allows an unprivileged application to set specific IP options, namely Loose Source and Record Route (LSRR) and Strict Source and Record Route (SSRR). By exploiting this, an attacker can force network packets to traverse through attacker-controlled nodes, leading to the leakage of sensitive information such as TCP Initial Sequence Numbers (ISN) and potentially other protocol details.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.