{"schema":"vulnpedia.research/1","cve":"CVE-2026-53266","references":[{"url":"https://git.kernel.org/stable/c/bf84ad7c7a9ede46e31afaa41a1ba06a159e8c87","tags":["Patch"],"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:34:43.383Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:34:43.383Z","url":"https://git.kernel.org/stable/c/bf84ad7c7a9ede46e31afaa41a1ba06a159e8c87"},{"source":"nvd","sourceId":"CVE-2026-53266","modified":"2026-09-19T04:17:53.580","url":"https://git.kernel.org/stable/c/bf84ad7c7a9ede46e31afaa41a1ba06a159e8c87"}]},{"url":"https://git.kernel.org/stable/c/76280b78cc9f23bdc6438e10ad6dff148ef8375b","tags":["Patch"],"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:34:43.383Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:34:43.383Z","url":"https://git.kernel.org/stable/c/76280b78cc9f23bdc6438e10ad6dff148ef8375b"},{"source":"nvd","sourceId":"CVE-2026-53266","modified":"2026-09-19T04:17:53.580","url":"https://git.kernel.org/stable/c/76280b78cc9f23bdc6438e10ad6dff148ef8375b"}]},{"url":"https://git.kernel.org/stable/c/b7e91939ba9be805a62a257fa4e227dffbb88fa0","tags":["Patch"],"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:34:43.383Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:34:43.383Z","url":"https://git.kernel.org/stable/c/b7e91939ba9be805a62a257fa4e227dffbb88fa0"},{"source":"nvd","sourceId":"CVE-2026-53266","modified":"2026-09-19T04:17:53.580","url":"https://git.kernel.org/stable/c/b7e91939ba9be805a62a257fa4e227dffbb88fa0"}]},{"url":"https://git.kernel.org/stable/c/afd64b59c3de9bbbdd3759e834fdc55cda716e0b","tags":["Patch"],"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:34:43.383Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:34:43.383Z","url":"https://git.kernel.org/stable/c/afd64b59c3de9bbbdd3759e834fdc55cda716e0b"},{"source":"nvd","sourceId":"CVE-2026-53266","modified":"2026-09-19T04:17:53.580","url":"https://git.kernel.org/stable/c/afd64b59c3de9bbbdd3759e834fdc55cda716e0b"}]},{"url":"https://git.kernel.org/stable/c/153ea96c806aea395daba907a4f88480b6ad5093","tags":["Patch"],"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:34:43.383Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:34:43.383Z","url":"https://git.kernel.org/stable/c/153ea96c806aea395daba907a4f88480b6ad5093"},{"source":"nvd","sourceId":"CVE-2026-53266","modified":"2026-09-19T04:17:53.580","url":"https://git.kernel.org/stable/c/153ea96c806aea395daba907a4f88480b6ad5093"}]},{"url":"https://git.kernel.org/stable/c/b18675263db1147c8e1cab625400c13a0d87bd2d","tags":["Patch"],"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:34:43.383Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:34:43.383Z","url":"https://git.kernel.org/stable/c/b18675263db1147c8e1cab625400c13a0d87bd2d"},{"source":"nvd","sourceId":"CVE-2026-53266","modified":"2026-09-19T04:17:53.580","url":"https://git.kernel.org/stable/c/b18675263db1147c8e1cab625400c13a0d87bd2d"}]},{"url":"https://git.kernel.org/stable/c/c9b5ff59feffb92a147a84a5aa28acd2cb8ff4c5","tags":["Patch"],"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:34:43.383Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:34:43.383Z","url":"https://git.kernel.org/stable/c/c9b5ff59feffb92a147a84a5aa28acd2cb8ff4c5"},{"source":"nvd","sourceId":"CVE-2026-53266","modified":"2026-09-19T04:17:53.580","url":"https://git.kernel.org/stable/c/c9b5ff59feffb92a147a84a5aa28acd2cb8ff4c5"}]},{"url":"https://git.kernel.org/stable/c/67ba971ae02514d85818fe0c32549ab4bfa3bf49","tags":["Patch"],"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:34:43.383Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:34:43.383Z","url":"https://git.kernel.org/stable/c/67ba971ae02514d85818fe0c32549ab4bfa3bf49"},{"source":"nvd","sourceId":"CVE-2026-53266","modified":"2026-09-19T04:17:53.580","url":"https://git.kernel.org/stable/c/67ba971ae02514d85818fe0c32549ab4bfa3bf49"}]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-53266","tags":["government-resource","US Government Resource"],"source":"mitre","sourceId":"CISA-ADP","modified":"2026-09-19T03:56:22.274Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-09-19T03:56:22.274Z","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-53266"},{"source":"nvd","sourceId":"CVE-2026-53266","modified":"2026-09-19T04:17:53.580","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-53266"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-53266","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-53266"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2485368","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2485368"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-53266","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-53266"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53266","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53266"}]},{"url":"https://lore.kernel.org/linux-cve-announce/2026062517-CVE-2026-53266-6162@gregkh/T/#u","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://lore.kernel.org/linux-cve-announce/2026062517-CVE-2026-53266-6162@gregkh/T/#u"}]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:72059","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://access.redhat.com/errata/RHSA-2026:72059"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:71687","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://access.redhat.com/errata/RHSA-2026:71687"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:71233","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://access.redhat.com/errata/RHSA-2026:71233"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:71569","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://access.redhat.com/errata/RHSA-2026:71569"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:36645","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://access.redhat.com/errata/RHSA-2026:36645"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:39083","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://access.redhat.com/errata/RHSA-2026:39083"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:70797","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://access.redhat.com/errata/RHSA-2026:70797"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:71325","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://access.redhat.com/errata/RHSA-2026:71325"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:71327","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://access.redhat.com/errata/RHSA-2026:71327"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:71326","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://access.redhat.com/errata/RHSA-2026:71326"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:39082","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://access.redhat.com/errata/RHSA-2026:39082"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:73732","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://access.redhat.com/errata/RHSA-2026:73732"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:71657","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://access.redhat.com/errata/RHSA-2026:71657"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:71601","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://access.redhat.com/errata/RHSA-2026:71601"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:71565","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://access.redhat.com/errata/RHSA-2026:71565"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:71606","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://access.redhat.com/errata/RHSA-2026:71606"}]},{"source":"euvd","sourceId":"EUVD-2026-39217","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-39217","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-39217","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-39217"}]},{"url":"https://vulncheck.com/kev","tags":["ADVISORY"],"source":"vulncheck-kev","sourceId":"CVE-2026-53266","modified":"2026-09-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-53266","modified":"2026-09-18T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-53266","modified":"2026-09-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-53266","modified":"2026-09-18T00:00:00Z","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/suominen/CVE-2026-53266","source":"poc-in-github","sourceId":"CVE-2026-53266","description":"Tracking CVE-2026-53266, the Linux kernel ebtables SNAT ARP-rewrite page-cache write","modified":"2026-09-28T08:35:56Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-53266","url":"https://github.com/suominen/CVE-2026-53266"},{"source":"poc-in-github","sourceId":"CVE-2026-53266","modified":"2026-09-28T08:35:56Z","url":"https://github.com/suominen/CVE-2026-53266"}],"tags":[]}],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json","productId":"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.20.el10nv.aarch64","product":"kernel-0:6.12.0-231.20.el10nv.aarch64 as a component of NVIDIA for RHEL 10","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:72059"},{"category":"workaround","details":"Disable ARP hardware address rewriting in ebtables SNAT rules, or remove ebtables SNAT rules that operate on ARP traffic on bridge interfaces."}],"purl":"pkg:rpm/redhat/kernel@6.12.0-231.20.el10nv?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json"}]},{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json","productId":"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.164.1.el7.ppc64le","product":"kernel-tools-debuginfo-0:3.10.0-1160.164.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:71687"},{"category":"workaround","details":"Disable ARP hardware address rewriting in ebtables SNAT rules, or remove ebtables SNAT rules that operate on ARP traffic on bridge interfaces."}],"purl":"pkg:rpm/redhat/kernel-tools-debuginfo@3.10.0-1160.164.1.el7?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json"}]},{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json","productId":"AppStream-10.2.Z:kernel-debuginfo-0:6.12.0-211.59.1.el10_2.x86_64","product":"kernel-debuginfo-0:6.12.0-211.59.1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:71233"},{"category":"workaround","details":"Disable ARP hardware address rewriting in ebtables SNAT rules, or remove ebtables SNAT rules that operate on ARP traffic on bridge interfaces."}],"purl":"pkg:rpm/redhat/kernel-debuginfo@6.12.0-211.59.1.el10_2?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json"}]},{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json","productId":"AppStream-9.4.0.Z.E4S:kernel-rt-debug-debuginfo-0:5.14.0-427.152.1.el9_4.aarch64","product":"kernel-rt-debug-debuginfo-0:5.14.0-427.152.1.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:71569"},{"category":"workaround","details":"Disable ARP hardware address rewriting in ebtables SNAT rules, or remove ebtables SNAT rules that operate on ARP traffic on bridge interfaces."}],"purl":"pkg:rpm/redhat/kernel-rt-debug-debuginfo@5.14.0-427.152.1.el9_4?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json"}]},{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json","productId":"AppStream-9.8.0.Z.MAIN.EUS:kernel-zfcpdump-debuginfo-0:5.14.0-687.23.1.el9_8.s390x","product":"kernel-zfcpdump-debuginfo-0:5.14.0-687.23.1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.","url":"https://access.redhat.com/errata/RHSA-2026:36645"},{"category":"workaround","details":"Disable ARP hardware address rewriting in ebtables SNAT rules, or remove ebtables SNAT rules that operate on ARP traffic on bridge interfaces."}],"purl":"pkg:rpm/redhat/kernel-zfcpdump-debuginfo@5.14.0-687.23.1.el9_8?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json"}]},{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json","productId":"BaseOS-10.2.Z:kernel-core-0:6.12.0-211.59.1.el10_2.aarch64","product":"kernel-core-0:6.12.0-211.59.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:71233"},{"category":"workaround","details":"Disable ARP hardware address rewriting in ebtables SNAT rules, or remove ebtables SNAT rules that operate on ARP traffic on bridge interfaces."}],"purl":"pkg:rpm/redhat/kernel-core@6.12.0-211.59.1.el10_2?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json"}]},{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json","productId":"BaseOS-8.10.0.Z.MAIN.EUS:kernel-tools-0:4.18.0-553.143.1.el8_10.ppc64le","product":"kernel-tools-0:4.18.0-553.143.1.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:39083"},{"category":"workaround","details":"Disable ARP hardware address rewriting in ebtables SNAT rules, or remove ebtables SNAT rules that operate on ARP traffic on bridge interfaces."}],"purl":"pkg:rpm/redhat/kernel-tools@4.18.0-553.143.1.el8_10?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json"}]},{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json","productId":"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.217.1.el8_6.x86_64","product":"kernel-0:4.18.0-372.217.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:70797"},{"category":"workaround","details":"Disable ARP hardware address rewriting in ebtables SNAT rules, or remove ebtables SNAT rules that operate on ARP traffic on bridge interfaces."}],"purl":"pkg:rpm/redhat/kernel@4.18.0-372.217.1.el8_6?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json"}]},{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json","productId":"BaseOS-8.8.0.Z.E4S:kernel-tools-libs-0:4.18.0-477.169.1.el8_8.ppc64le","product":"kernel-tools-libs-0:4.18.0-477.169.1.el8_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:71325"},{"category":"workaround","details":"Disable ARP hardware address rewriting in ebtables SNAT rules, or remove ebtables SNAT rules that operate on ARP traffic on bridge interfaces."}],"purl":"pkg:rpm/redhat/kernel-tools-libs@4.18.0-477.169.1.el8_8?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json"}]},{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json","productId":"BaseOS-9.4.0.Z.E4S:kernel-64k-debug-core-0:5.14.0-427.152.1.el9_4.aarch64","product":"kernel-64k-debug-core-0:5.14.0-427.152.1.el9_4.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:71569"},{"category":"workaround","details":"Disable ARP hardware address rewriting in ebtables SNAT rules, or remove ebtables SNAT rules that operate on ARP traffic on bridge interfaces."}],"purl":"pkg:rpm/redhat/kernel-64k-debug-core@5.14.0-427.152.1.el9_4?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json"}]},{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json","productId":"BaseOS-9.6.0.Z.EUS:kernel-modules-core-0:5.14.0-570.143.1.el9_6.aarch64","product":"kernel-modules-core-0:5.14.0-570.143.1.el9_6.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:71327"},{"category":"workaround","details":"Disable ARP hardware address rewriting in ebtables SNAT rules, or remove ebtables SNAT rules that operate on ARP traffic on bridge interfaces."}],"purl":"pkg:rpm/redhat/kernel-modules-core@5.14.0-570.143.1.el9_6?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json"}]},{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json","productId":"CRB-10.0.Z.E2S:kernel-debuginfo-0:6.12.0-55.106.1.el10_0.aarch64","product":"kernel-debuginfo-0:6.12.0-55.106.1.el10_0.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:71326"},{"category":"workaround","details":"Disable ARP hardware address rewriting in ebtables SNAT rules, or remove ebtables SNAT rules that operate on ARP traffic on bridge interfaces."}],"purl":"pkg:rpm/redhat/kernel-debuginfo@6.12.0-55.106.1.el10_0?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json"}]},{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json","productId":"CRB-9.8.0.Z.MAIN.EUS:kernel-debuginfo-0:5.14.0-687.23.1.el9_8.aarch64","product":"kernel-debuginfo-0:5.14.0-687.23.1.el9_8.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.","url":"https://access.redhat.com/errata/RHSA-2026:36645"},{"category":"workaround","details":"Disable ARP hardware address rewriting in ebtables SNAT rules, or remove ebtables SNAT rules that operate on ARP traffic on bridge interfaces."}],"purl":"pkg:rpm/redhat/kernel-debuginfo@5.14.0-687.23.1.el9_8?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json"}]},{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json","productId":"NFV-9.6.0.Z.EUS:kernel-rt-modules-0:5.14.0-570.143.1.el9_6.x86_64","product":"kernel-rt-modules-0:5.14.0-570.143.1.el9_6.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV EUS (v.9.6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:71327"},{"category":"workaround","details":"Disable ARP hardware address rewriting in ebtables SNAT rules, or remove ebtables SNAT rules that operate on ARP traffic on bridge interfaces."}],"purl":"pkg:rpm/redhat/kernel-rt-modules@5.14.0-570.143.1.el9_6?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json"}]},{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json","productId":"RT-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.143.1.rt7.484.el8_10.x86_64","product":"kernel-rt-devel-0:4.18.0-553.143.1.rt7.484.el8_10.x86_64 as a component of Red Hat Enterprise Linux RT (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:39082"},{"category":"workaround","details":"Disable ARP hardware address rewriting in ebtables SNAT rules, or remove ebtables SNAT rules that operate on ARP traffic on bridge interfaces."}],"purl":"pkg:rpm/redhat/kernel-rt-devel@4.18.0-553.143.1.rt7.484.el8_10?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json"}]},{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json","productId":"RT-9.8.0.Z.MAIN.EUS:python3-perf-debuginfo-0:5.14.0-687.23.1.el9_8.x86_64","product":"python3-perf-debuginfo-0:5.14.0-687.23.1.el9_8.x86_64 as a component of Red Hat Enterprise Linux Real Time (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.","url":"https://access.redhat.com/errata/RHSA-2026:36645"},{"category":"workaround","details":"Disable ARP hardware address rewriting in ebtables SNAT rules, or remove ebtables SNAT rules that operate on ARP traffic on bridge interfaces."}],"purl":"pkg:rpm/redhat/python3-perf-debuginfo@5.14.0-687.23.1.el9_8?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json"}]},{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json","productId":"red_hat_enterprise_linux_9:kernel-rt","product":"kernel-rt as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"Disable ARP hardware address rewriting in ebtables SNAT rules, or remove ebtables SNAT rules that operate on ARP traffic on bridge interfaces."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/kernel-rt","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json"}]},{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json","productId":"red_hat_enterprise_linux_9:kernel-rt-core","product":"kernel-rt-core as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"Disable ARP hardware address rewriting in ebtables SNAT rules, or remove ebtables SNAT rules that operate on ARP traffic on bridge interfaces."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/kernel-rt-core","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json"}]},{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json","productId":"red_hat_enterprise_linux_9:kernel-rt-debug-core","product":"kernel-rt-debug-core as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"Disable ARP hardware address rewriting in ebtables SNAT rules, or remove ebtables SNAT rules that operate on ARP traffic on bridge interfaces."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/kernel-rt-debug-core","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json"}]},{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json","productId":"red_hat_enterprise_linux_9:kernel-rt-debug-devel","product":"kernel-rt-debug-devel as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"Disable ARP hardware address rewriting in ebtables SNAT rules, or remove ebtables SNAT rules that operate on ARP traffic on bridge interfaces."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/kernel-rt-debug-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json"}]},{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json","productId":"red_hat_enterprise_linux_9:kernel-rt-debug-kvm","product":"kernel-rt-debug-kvm as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"Disable ARP hardware address rewriting in ebtables SNAT rules, or remove ebtables SNAT rules that operate on ARP traffic on bridge interfaces."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/kernel-rt-debug-kvm","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json"}]},{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json","productId":"red_hat_enterprise_linux_9:kernel-rt-debug-modules","product":"kernel-rt-debug-modules as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"Disable ARP hardware address rewriting in ebtables SNAT rules, or remove ebtables SNAT rules that operate on ARP traffic on bridge interfaces."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/kernel-rt-debug-modules","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json"}]},{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json","productId":"red_hat_enterprise_linux_9:kernel-rt-debug-modules-core","product":"kernel-rt-debug-modules-core as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"Disable ARP hardware address rewriting in ebtables SNAT rules, or remove ebtables SNAT rules that operate on ARP traffic on bridge interfaces."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/kernel-rt-debug-modules-core","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json"}]},{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json","productId":"red_hat_enterprise_linux_9:kernel-rt-debug-modules-internal","product":"kernel-rt-debug-modules-internal as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"Disable ARP hardware address rewriting in ebtables SNAT rules, or remove ebtables SNAT rules that operate on ARP traffic on bridge interfaces."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/kernel-rt-debug-modules-internal","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json"}]},{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json","productId":"red_hat_enterprise_linux_9:kernel-rt-debug-modules-partner","product":"kernel-rt-debug-modules-partner as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"Disable ARP hardware address rewriting in ebtables SNAT rules, or remove ebtables SNAT rules that operate on ARP traffic on bridge interfaces."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/kernel-rt-debug-modules-partner","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json"}]},{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json","productId":"red_hat_enterprise_linux_9:kernel-rt-devel-matched","product":"kernel-rt-devel-matched as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"Disable ARP hardware address rewriting in ebtables SNAT rules, or remove ebtables SNAT rules that operate on ARP traffic on bridge interfaces."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/kernel-rt-devel-matched","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json"}]},{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json","productId":"red_hat_enterprise_linux_9:kernel-rt-kvm","product":"kernel-rt-kvm as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"Disable ARP hardware address rewriting in ebtables SNAT rules, or remove ebtables SNAT rules that operate on ARP traffic on bridge interfaces."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/kernel-rt-kvm","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json"}]},{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json","productId":"red_hat_enterprise_linux_9:kernel-rt-modules","product":"kernel-rt-modules as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"Disable ARP hardware address rewriting in ebtables SNAT rules, or remove ebtables SNAT rules that operate on ARP traffic on bridge interfaces."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/kernel-rt-modules","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json"}]},{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json","productId":"red_hat_enterprise_linux_9:kernel-rt-modules-extra","product":"kernel-rt-modules-extra as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"Disable ARP hardware address rewriting in ebtables SNAT rules, or remove ebtables SNAT rules that operate on ARP traffic on bridge interfaces."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/kernel-rt-modules-extra","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json"}]},{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json","productId":"red_hat_enterprise_linux_9:kernel-rt-modules-internal","product":"kernel-rt-modules-internal as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"Disable ARP hardware address rewriting in ebtables SNAT rules, or remove ebtables SNAT rules that operate on ARP traffic on bridge interfaces."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/kernel-rt-modules-internal","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json"}]},{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json","productId":"red_hat_enterprise_linux_9:kernel-rt-selftests-internal","product":"kernel-rt-selftests-internal as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"Disable ARP hardware address rewriting in ebtables SNAT rules, or remove ebtables SNAT rules that operate on ARP traffic on bridge interfaces."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/kernel-rt-selftests-internal","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json"}]},{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json","productId":"red_hat_enterprise_linux_9:kernel-rt.src","product":"kernel-rt.src as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"Disable ARP hardware address rewriting in ebtables SNAT rules, or remove ebtables SNAT rules that operate on ARP traffic on bridge interfaces."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/kernel-rt?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-53266","modified":"2026-09-30T14:44:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53266.json"}]}],"vendorCoverage":{"total":2358,"shown":32,"omitted":2326,"source":"redhat"},"exploitationSources":[{"source":"vulncheck-kev","sourceId":"CVE-2026-53266","catalog":"VulnCheck KEV","kind":"catalogue","url":"https://vulncheck.com/kev","dateAdded":"2026-09-18T00:00:00Z","modified":"2026-09-18T00:00:00Z","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","knownRansomwareCampaignUse":"Unknown","reportedByVulncheckCanaries":false,"vendorProject":"Linux","product":"Kernel","dueDate":"2026-09-21T00:00:00Z","cisaDateAdded":"2026-09-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-53266","modified":"2026-09-18T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-53266","catalog":"VulnCheck KEV","kind":"report","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","dateAdded":"2026-09-18T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-53266","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]}]}