vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-53236

tcp: restrict SO_ATTACH_FILTER to priv users

MEDIUM
5.5
CVSS Score
Published: June 25, 2026 at 08:39 AM UTC
Updated: October 15, 2026 at 02:20 AM UTC
4 products affected across 2 vendorsLinux KernelSIMATIC S7-1500 CPU 1518-4 Pn /dp MFP FirmwareSiplus S7-1500 CPU 1518-4 Pn /dp MFP Firmware

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.1%

Description

In the Linux kernel, the following vulnerability has been resolved: tcp: restrict SO_ATTACH_FILTER to priv users This patch restricts the use of SO_ATTACH_FILTER (cBPF) on TCP sockets to users with CAP_NET_ADMIN capability. This blocks potential side-channel attack where an unprivileged application attaches a filter to leak TCP sequence/acknowledgment numbers.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
95%
2.6.12.1 ≤ v < 6.1.1766.13 ≤ v < 6.18.366.19 ≤ v < 7.0.136.2 ≤ v < 6.6.1436.7 ≤ v < 6.12.941da177e4c3f41524e886b7f1b8a0c1fc7321cac22.6.122.6.12 rc22.6.12 rc32.6.12 rc42.6.12 rc57.17.1 rc17.1 rc27.1 rc37.1 rc47.1 rc57.1 rc67.1 rc7
Vendor states this is fixed in 3747de241a66ef2c7032d2cc2b826a47c5fa0f6a (fixed)
Vendor states this is fixed in 5d39580f68e6ddeedd15e587282207489dfb3da2 (fixed)
Vendor states this is fixed in 82b3e7ce10c53fc12aab8904745603efc74f8c07 (fixed)
Vendor states this is fixed in c68517a3e18e20997808821c5559d0cba4d776c1 (fixed)
Vendor states this is fixed in ecfe9171b26ae3eed0cd8bab7a943e9e2c9e51ba (fixed)
Vendor states this is fixed in ede69b8f6670600e534591664584f810d7c385f9 (fixed)
Vendor states this is fixed in 2.6.12 (unaffected)
Vendor states this is fixed in 6.1.176 (unaffected)
Vendor states this is fixed in 6.12.94 (unaffected)
Vendor states this is fixed in 6.18.36 (unaffected)
Vendor states this is fixed in 6.6.143 (unaffected)
Vendor states this is fixed in 7.0.13 (unaffected)
Vendor states this is fixed in 7.1 (unaffected)
SIMATIC S7-1500 CPU 1518-4 Pn /dp MFP Firmware· Siemens
60%
v ≥ V3.1.63.1.6
SIMATIC S7-1500 CPU 1518F 4 Pn /dp MFP Firmware· Siemens
60%
v ≥ V3.1.63.1.6
Siplus S7-1500 CPU 1518-4 Pn /dp MFP Firmware· Siemens
60%
v ≥ V3.1.63.1.6

References (9)

Patch
Source: cverecord
https://git.kernel.org/stable/c/3747de241a66ef2c7032d2cc2b826a47c5fa0f6a
Patch
Source: cverecord
https://git.kernel.org/stable/c/ecfe9171b26ae3eed0cd8bab7a943e9e2c9e51ba
Patch
Source: cverecord
https://git.kernel.org/stable/c/82b3e7ce10c53fc12aab8904745603efc74f8c07
Patch
Source: cverecord
https://git.kernel.org/stable/c/ede69b8f6670600e534591664584f810d7c385f9
Patch
Source: cverecord
https://git.kernel.org/stable/c/c68517a3e18e20997808821c5559d0cba4d776c1
Patch
Source: cverecord
https://git.kernel.org/stable/c/5d39580f68e6ddeedd15e587282207489dfb3da2
Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
https://cert-portal.siemens.com/productcert/html/ssa-019113.html
Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
https://cert-portal.siemens.com/productcert/html/ssa-457936.html

CVSS

5.5MEDIUM[email protected]
Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card