CVE-2026-53212

🗓️ 25 Jun 2026 08:39:16Reported by LinuxType

Fix use-after-free in nft_tunnel object destroy by replacing metadata_dst_free with dst_release.

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2026-53212	25 Jun 202608:39	–	attackerkb
Cvelist	CVE-2026-53212 netfilter: nft_tunnel: fix use-after-free on object destroy	25 Jun 202608:39	–	cvelist
Debian CVE	CVE-2026-53212	25 Jun 202608:39	–	debiancve
EUVD	EUVD-2026-39303	25 Jun 202608:39	–	euvd
NVD	CVE-2026-53212	25 Jun 202609:16	–	nvd
OSV	DEBIAN-CVE-2026-53212	25 Jun 202611:48	–	osv
OSV	ECHO-E598-1181-5805	25 Jun 202620:51	–	osv
Positive Technologies	PT-2026-52307	25 Jun 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-53212	25 Jun 202617:47	–	redhatcve

Vulners

CNA

Node

linux linux_kernelRange4.19–5.10.259

linux linux_kernelRange5.11.0–5.15.210

linux linux_kernelRange5.16.0–6.1.176

linux linux_kernelRange6.2.0–6.6.143

linux linux_kernelRange6.7.0–6.12.94

linux linux_kernelRange6.13.0–6.18.36

linux linux_kernelRange6.19.0–7.0.13

linux linux_kernelRange7.1.0≥

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "net/netfilter/nft_tunnel.c"
    ],
    "versions": [
      {
        "version": "af308b94a2a4a5a27bec9028354c4df444a7c8ba",
        "lessThan": "349df61526d2e39decc685d246202e3e284cfe05",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "af308b94a2a4a5a27bec9028354c4df444a7c8ba",
        "lessThan": "55b79b1ae42372012413ce0413181d26679b17ef",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "af308b94a2a4a5a27bec9028354c4df444a7c8ba",
        "lessThan": "5e9ee18b27fde88cb6148202b33916c66693fe82",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "af308b94a2a4a5a27bec9028354c4df444a7c8ba",
        "lessThan": "8767fe4079affa74314d7eb3220e700150289842",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "af308b94a2a4a5a27bec9028354c4df444a7c8ba",
        "lessThan": "fda6573a46ad24f35348e024905ee5bdf729797e",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "af308b94a2a4a5a27bec9028354c4df444a7c8ba",
        "lessThan": "941d7394efda5e054e2d6f3e0dd0f6a9ba19aaa3",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "af308b94a2a4a5a27bec9028354c4df444a7c8ba",
        "lessThan": "f9a0e4b61054cde89a2a77845293c726cc07cc43",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "af308b94a2a4a5a27bec9028354c4df444a7c8ba",
        "lessThan": "c32b26aaa2f9216520a38b3f4bfeec846eb3eb8a",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "net/netfilter/nft_tunnel.c"
    ],
    "versions": [
      {
        "version": "4.19",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "4.19",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.259",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.210",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.176",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.143",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.94",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.36",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.0.13",
        "lessThanOrEqual": "7.0.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.1",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/5e9ee18b27fde88cb6148202b33916c66693fe82
git	www.git.kernel.org/stable/c/fda6573a46ad24f35348e024905ee5bdf729797e
git	www.git.kernel.org/stable/c/c32b26aaa2f9216520a38b3f4bfeec846eb3eb8a
git	www.git.kernel.org/stable/c/55b79b1ae42372012413ce0413181d26679b17ef
git	www.git.kernel.org/stable/c/349df61526d2e39decc685d246202e3e284cfe05
git	www.git.kernel.org/stable/c/941d7394efda5e054e2d6f3e0dd0f6a9ba19aaa3
git	www.git.kernel.org/stable/c/f9a0e4b61054cde89a2a77845293c726cc07cc43
git	www.git.kernel.org/stable/c/8767fe4079affa74314d7eb3220e700150289842

25 Jun 2026 09:16Current

5.7Medium risk

Vulners AI Score5.7

EPSS0.00176