CVE-2026-53366
The CVE-2026-53366 fix applies to the Linux kernel IPv4 stack, specifically the paged-allocation path in __ip_append_data(). The issue arises when fraggap from the previous skb is copied into the new skb’s linear area; alloclen and pagedlen were computed as alloclen = fragheaderlen + transhdrlen ...