NetSight
IP …
medium5.5

CVE-2026-53236

In the Linux kernel, the following vulnerability has been resolved: tcp: restrict SO_ATTACH_FILTER to priv users This patch restricts the use of SO_ATTACH_FILT…

Impact

In the Linux kernel, the following vulnerability has been resolved: tcp: restrict SO_ATTACH_FILTER to priv users This patch restricts the use of SO_ATTACH_FILTER (cBPF) on TCP sockets to users with CAP_NET_ADMIN capability. This blocks potential side-channel attack where an unprivileged application attaches a filter to leak TCP sequence/acknowledgment numbers.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.12.1 before 6.1.176
from 6.2 before 6.6.143
from 6.7 before 6.12.94
from 6.13 before 6.18.36
from 6.19 before 7.0.13
Version 2.6.12

References