The Linux kernel vulnerability CVE-2026-53218 concerns the netfilter nft_exthdr module where nft_exthdr_init() passes a user-controlled length (priv->len) to nft_parse_register_store(), marking that many bytes as initialized in the register bitmap. When the NFT_EXTHDR_F_PRESENT flag is set, the evaluation paths write only 1 byte (via nft_reg_store8) or 4 bytes (setting *dest = 0 on TCP/DCCP error paths). If the length exceeds 4, registers beyond the first remain uninitialized, potentially leaking stack data from nft_regs. The resolution involves adding a check to bail out if userspace requests more data than allowed when F_PRESENT is set.

This vulnerability can lead to the retention of uninitialized stack data in registers, which may expose sensitive information or cause undefined behavior. The CVSS vector indicates no confidentiality or integrity impact but a high availability impact, suggesting potential denial of service or kernel stability issues. There is no indication of known exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should monitor vendor communications for updates. No specific mitigations are provided in the available data.