The Linux kernel vulnerability CVE-2026-53080 involves the cls_fw classifier in the net/sched subsystem. Since a commit that protected the filter_chain list with a mutex, filters are added to a shared block and published before their change() function is invoked. This allows invalid "old-style" filters to classify packets temporarily before validation destroys them, leading to a NULL pointer dereference in fw_classify(). The issue manifests as a kernel warning and a NULL pointer dereference bug, potentially causing kernel crashes or denial of service. The fix involves skipping old-style classification on shared blocks to prevent the NULL dereference and avoid triggering WARN_ON().

The vulnerability can cause a kernel NULL pointer dereference resulting in a kernel warning and potential system crash or denial of service. There is no indication of confidentiality or integrity impact. The attack vector requires local access (AV:L) with low privileges (PR:L) and no user interaction (UI:N). The severity is moderate due to the availability of a denial of service condition without escalation or data compromise.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is applied, avoid using or loading cls_fw filters created with the old method on shared blocks. Monitor vendor communications for an official fix or temporary workaround. No specific mitigation is documented beyond avoiding the vulnerable usage pattern.