Parsing Vulnerability in Linux Kernel Affecting Vector Attribute Events

CVE-2026-53245

What is CVE-2026-53245?

A vulnerability in the Linux kernel's handling of vector attribute events can lead to improper parsing in the mrp_pdu_parse_vecattr() function. This issue arises when the parser fails to correctly decrement the event counter after processing events encoded across multiple bytes, potentially allowing for spurious event applications. Moreover, the parser improperly consumes bytes when valen is zero, corrupting subsequent parsing offsets, and does not adequately manage attribute values across byte boundaries. These flaws collectively affect the integrity of network data processing, necessitating prompt attention.

References