CVE-2026-53363

kernel: xfrm: iptfs: preserve shared-frag marker in iptfs_consume_frags()

Loading…

Severity

Low

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 10, 2026

Updated · October 15, 2026

Description

A flaw was found in the Linux kernel's iptfs component, part of the IPSec framework. The iptfs_consume_frags() function does not correctly propagate a flag indicating shared fragments. This can cause the Encapsulating Security Payload (ESP) to make incorrect security decisions regarding in-place encryption, potentially impacting the integrity or confidentiality of network traffic.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-821 · Incorrect Synchronization