CVE-2026-53014

In the Linux kernel, the following vulnerability has been resolved: net/sched: act_mirred: fix wrong device for mac_header_xmit check in tcf_blockcast_redir In tcf_blockcast_redir(), when iterating block ports to redirect packets to multiple devices, the mac_header_xmit flag is queried from the wrong device. The loop sends to dev_prev but queries dev_is_mac_header_xmit(dev) — which is the NEXT device in the iteration, not the one being sent to. This causes tcf_mirred_to_dev() to make incorrect decisions about whether to push or pull the MAC header. When the block contains mixed device types (e.g., an ethernet veth and a tunnel device), intermediate devices get the wrong mac_header_xmit flag, leading to skb header corruption. In the worst case, skb_push_rcsum with an incorrect mac_len can exhaust headroom and panic. The last device in the loop is handled correctly (line 365-366 uses dev_is_mac_header_xmit(dev_prev)), confirming this is a copy-paste oversight for the intermediate devices. Fix by using dev_prev instead of dev for the mac_header_xmit query, consistent with the device actually being sent to.

• https://git.kernel.org/stable/c/4510d140524ca7d6e772db962e013f26f09a63b1Patch
• https://git.kernel.org/stable/c/4764953c4b47585eb72797b216b63a831dc0c7e6Patch
• https://git.kernel.org/stable/c/7db3e4e03032261b1b519341123fc30d995478caPatch
• https://git.kernel.org/stable/c/8fda5174286119addd28473fb2ec5bdf521c05a8Patch

Published

Jun 24, 2026

Last Modified

Jul 15, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-53009In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-5301Stored XSS in log viewer in CoolerControl/coolercontrol-ui <…6.1
• CVE-2026-53010In the Linux kernel, the following vulnerability has been re…9.8
• CVE-2026-53011In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-53012In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-53013In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-53015In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-53016In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-53017In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-53018In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-53019In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-5302CORS misconfiguration in CoolerControl/coolercontrold <4.0.0…8.1