CVE-2026-53263

A flaw was found in the Linux kernel's 6lowpan component. An off-by-one error during multicast context address compression can lead to the transmission of uninitialized kernel stack memory over the network. This vulnerability results in information disclosure, potentially allowing an attacker to access sensitive kernel data.

This vulnerability is rated as Moderate severity because exploitation requires active 6LoWPAN interfaces, which are not configured by default in standard Red Hat Enterprise Linux environments, and the impact is limited to kernel stack information disclosure. When processing compressed IPv6 multicast packets across low-power personal area networks, an off-by-one memory indexing flaw results in residual stack contents being transmitted over the wire. Systems operating without low-power wireless networking or IEEE 802.15.4 hardware do not expose this code path.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.