CVE-2026-52917: linux kernel from 4.7 (inclusive), before 5.10.259 (exclusive), from 5.11 (inclusive), before 5.15.210 (exclusive)…

Affected technology

linux kernel · from 4.7 (inclusive), before 5.10.259 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.210 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.176 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.143 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.94 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.36 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.13 (exclusive)
linux

linux kernel · 7.1 · update rc1
linux

linux kernel · 7.1 · update rc2
linux

linux kernel · 7.1 · update rc3
linux

linux kernel · 7.1 · update rc4
linux

linux kernel · 7.1 · update rc5
linux

linux kernel · 7.1 · update rc6
linux

Linux · 8f840e47f190cbe61a96945c13e9551048d42cef to before 6657af827e21883ae90693e42e7f59a6aab690b5, 8f840e47f190cbe61a96945c13e9551048d42cef to before b2be72d401833194917e44fbd8d8144bb4f2db16, 8f840e47f190cbe61a96945c13e9551048d42cef to before 5425de8bd6e9fe5bd67d158e3348171ae7510117, 8f840e47f190cbe61a96945c13e9551048d42cef to before e97c2a535e23ed0fdd2660993fb3f10d9535c9bc, 8f840e47f190cbe61a96945c13e9551048d42cef to before 480f754580b5686b928977d16a59f20cef83ff01, 8f840e47f190cbe61a96945c13e9551048d42cef to before 78c4f964b2f94e405721c093773f6250e1e676b2, 8f840e47f190cbe61a96945c13e9551048d42cef to before f5af203dec6e0e7a6090fcc2130e9f3901bfc84d, 8f840e47f190cbe61a96945c13e9551048d42cef to before 5eba3e48d78edd7551b992cb7ba687019b3a78da
Linux

Linux · 4.7
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
File: net/sctp/diag.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.