Medium 5.5Published Jun 24, 2026

CVE-2026-53001netfilter: xtables: restrict several matches to inet family

Updated under an hour ago (Oct 27, 2026, 7:30 PM ET)

Does this affect you?

It affects Linux and 4 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: netfilter: xtables: restrict several matches to inet family This is a partial revert of: commit ab4f21e6fb1c ("netfilter: xtables: use NFPROTO_UNSPEC in more extensions") to allow ipv4 and ipv6 only. - xt_mac - xt_owner - xt_physdev These extensions are not used by ebtables in userspace. Moreover, xt_realm is only for ipv4, since dst->tclassid is ipv4 specific.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from ab4f21e6fb1c09b13c4c3cb8357babe8223471bd before 14203f9edf944b3fb63faadd62f38452421ecdfc; from ab4f21e6fb1c09b13c4c3cb8357babe8223471bd before 7eaf9c740f33230cb224dc265f3c69f8531ff57b; from ab4f21e6fb1c09b13c4c3cb8357babe8223471bd before 9a109751b297b0f2135495749ef5a18ba31ec7d4; from ab4f21e6fb1c09b13c4c3cb8357babe8223471bd before cbeb259f31382de70a70a59ffd0e66f5e80d9818; from ab4f21e6fb1c09b13c4c3cb8357babe8223471bd before 689a91ff18d6448d94c1ab7c076fecdb2b668bef; from ab4f21e6fb1c09b13c4c3cb8357babe8223471bd before 76160e04440c9698b989dbd9492a7ec4f520c9ee; from ab4f21e6fb1c09b13c4c3cb8357babe8223471bd before fa88161ef56e29bdaa05cc89dbc4ee221e94bfe9; from ab4f21e6fb1c09b13c4c3cb8357babe8223471bd before b6fe26f86a1649f84e057f3f15605b08eda15497	CNA record
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518f_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP siemens:siplus_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
linux linux_kernel linux:linux_kernel	from 2.6.28 before 5.10.258; from 5.11 before 5.15.209; from 5.16 before 6.1.175; from 6.2 before 6.6.141; from 6.7 before 6.12.91; from 6.13 before 6.18.33; from 6.19 before 7.0.10	NVD

References

References

https://git.kernel.org/stable/c/14203f9edf944b3fb63faadd62f38452421ecdfc	patch
https://git.kernel.org/stable/c/7eaf9c740f33230cb224dc265f3c69f8531ff57b	patch
https://git.kernel.org/stable/c/9a109751b297b0f2135495749ef5a18ba31ec7d4	patch
https://git.kernel.org/stable/c/cbeb259f31382de70a70a59ffd0e66f5e80d9818	patch
https://git.kernel.org/stable/c/689a91ff18d6448d94c1ab7c076fecdb2b668bef	patch
https://git.kernel.org/stable/c/76160e04440c9698b989dbd9492a7ec4f520c9ee	patch
https://git.kernel.org/stable/c/fa88161ef56e29bdaa05cc89dbc4ee221e94bfe9	patch
https://git.kernel.org/stable/c/b6fe26f86a1649f84e057f3f15605b08eda15497	patch
https://cert-portal.siemens.com/productcert/html/ssa-019113.html
https://cert-portal.siemens.com/productcert/html/ssa-457936.html

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.