CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2026-52915: linux kernel 2.6.12; +1 more affected products

CVE-2026-52915. CVSS 3.1 base score 7.1 (HIGH, Source advisory). EPSS 0.00126 (percentile 0.02035), scored 15-Oct-2026.

Affected technology

linux kernel · from 2.6.12.1 (inclusive), before 5.10.258 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.209 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.175 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.142 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.92 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.34 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.11 (exclusive)
linux

linux kernel · 2.6.12
linux

linux kernel · 2.6.12 · update rc2
linux

linux kernel · 2.6.12 · update rc3
linux

linux kernel · 2.6.12 · update rc4
linux

linux kernel · 2.6.12 · update rc5
linux

linux kernel · 7.1 · update rc1
linux

linux kernel · 7.1 · update rc2
linux

linux kernel · 7.1 · update rc3
linux

linux kernel · 7.1 · update rc4
linux

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2d523ba48d4ecc46acfb6aba548292cfcce1ac02, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 588933f1a2ca5ff99274f8c9f25dc3a25d0191c3, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 784aadea7a108c9f90985683caa87fb0198c6a39, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 41ec2e242f1702e8370ddfe14d22b7a766021c3e, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before db0250470f023f159094052c0bd5ab026a88ae93, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 57b0ac5e1b46f1f0338dff392ef2092e2871b412, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6feb43c0995ab3a9c826707eb46541a1696fe4f7, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 4322dcde6b4173c2d8e8e6118ed290794263bcc8
Linux

Linux · 2.6.12
Linux

Component: Not specified by the source
File: net/ipv6/netfilter/ip6t_hbh.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-129
CCR priority
28.4 /100 (P4)
CVSS 3.1
7.1 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H · Source advisory
EPSS
0.00126 · percentile 0.02035 · 2026-10-15
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-52915.html