Threats tagged 'ghsa-mrf2-hc9c-229v'

CVE-2026-53267 is a high-severity vulnerability in the Linux kernel's netfilter nft_ct component. It involves improper handling of template connection tracking (ct) objects during evaluation, leading to a stack overflow or memory corruption via a crafted nftables rule. The flaw arises when a template ct is mistakenly treated as a real ct, causing an out-of-bounds memcpy on the kernel stack. This can result in corruption of adjacent kernel memory and potentially allow privilege escalation or denial of service.