CVE-2026-53236

Summary: The Linux kernel patch restricts the use of SO_ATTACH_FILTER (cBPF) on TCP sockets to users with the CAP_NET_ADMIN capability, mitigating a potential side-channel where an unprivileged process could attach a filter to leak TCP sequence/ACK numbers. Affected component: Linux kernel TCP so...