CVE-2026-52924: linux kernel from 4.15 (inclusive), before 5.10.259 (exclusive), from 5.11 (inclusive), before 5.15.210 (exclusive)…

Affected technology

linux kernel · from 4.15 (inclusive), before 5.10.259 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.210 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.176 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.143 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.94 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.36 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.13 (exclusive)
linux

linux kernel · 7.1 · update rc1
linux

linux kernel · 7.1 · update rc2
linux

linux kernel · 7.1 · update rc3
linux

linux kernel · 7.1 · update rc4
linux

linux kernel · 7.1 · update rc5
linux

linux kernel · 7.1 · update rc6
linux

Linux · 5bbbbe32a43199c2b9ea5ea66fab6241c64beb51 to before 84b7a319105db2f917ccdcf502bdc866082b1285, 5bbbbe32a43199c2b9ea5ea66fab6241c64beb51 to before f46e1d1a758878f0d22c4fbbd1bf42bb7165d1e8, 5bbbbe32a43199c2b9ea5ea66fab6241c64beb51 to before 3c0741a441a7df7099d7ca6a64a6a0de09c677c8, 5bbbbe32a43199c2b9ea5ea66fab6241c64beb51 to before 2afc9e684dc7fecf73db1edc937ebbc47b4b68dc, 5bbbbe32a43199c2b9ea5ea66fab6241c64beb51 to before 1d4652f677906a64487c13f9ace54b0eb263b5d0, 5bbbbe32a43199c2b9ea5ea66fab6241c64beb51 to before a6207349e703cfc04756a4d16dec9176135813a5, 5bbbbe32a43199c2b9ea5ea66fab6241c64beb51 to before 83ade59e5da365f4bf8bce72c5a38774202b442f, 5bbbbe32a43199c2b9ea5ea66fab6241c64beb51 to before e374b22e9b07b72a25909621464ff74096151bfb
Linux

Linux · 4.15
Linux

Red Hat Enterprise Linux 8 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 10 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 6 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 7 · Exact affected versions not specified by the source
Red Hat

Component: Not specified by the source
File: net/sctp/sm_statefuns.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

A remote attacker could trigger a use-after-free error. Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not state a further attacker outcome.