CVE-2026-53238

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> netlabel: validate unlabeled address and mask attribute lengths<br /> <br /> netlbl_unlabel_addrinfo_get() used the address attribute length to<br /> determine whether the attribute data could be read as an IPv4 or IPv6<br /> address, but did not independently validate the corresponding mask<br /> attribute length. A crafted Generic Netlink request could therefore<br /> provide a valid IPv4/IPv6 address attribute with a shorter mask<br /> attribute, which would later be read as a full struct in_addr or<br /> struct in6_addr.<br /> <br /> NLA_BINARY policy lengths are maximum lengths by default, so use<br /> NLA_POLICY_EXACT_LEN() for the unlabeled IPv4/IPv6 address and mask<br /> attributes. This rejects short attributes during policy validation and<br /> also exposes the exact length requirements through policy introspection.