CVE-2026-53268
kernel: netfilter: conntrack_irc: fix possible out-of-bounds read
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · June 25, 2026
Updated · September 17, 2026
Description
A flaw was found in the Linux kernel's netfilter conntrack_irc module. This vulnerability allows for a possible out-of-bounds read. When parsing network traffic, if a command string is matched but subsequent parsing fails, the system does not properly exit, leading to the flaw. This could potentially allow an attacker to cause a denial of service or disclose sensitive information.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 7CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-125 · Out-of-bounds Read