CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2026-52948: linux kernel 2.6.29; +2 more affected products

CVE-2026-52948. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00129 (percentile 0.02288), scored 14-Oct-2026.

Affected technology

linux kernel · from 2.6.29.1 (inclusive), before 5.10.259 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.210 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.176 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.143 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.94 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.36 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.13 (exclusive)
linux

linux kernel · 2.6.29
linux

linux kernel · 2.6.29 · update rc7
linux

linux kernel · 2.6.29 · update rc8
linux

linux kernel · 7.1 · update rc1
linux

linux kernel · 7.1 · update rc2
linux

Linux · cd97f39b7cdf1c8a9c9f52865eec795b7f0c811d to before e9ffd5f5050fbb199d270a85614cd27ebed6fbac, cd97f39b7cdf1c8a9c9f52865eec795b7f0c811d to before 0b88ecfbc9dc33b4db8836c37b50cf174e6c0691, cd97f39b7cdf1c8a9c9f52865eec795b7f0c811d to before 943e318eedbeaeea08ece3f5dd44c982f4ed2ef5, cd97f39b7cdf1c8a9c9f52865eec795b7f0c811d to before aa6ef734016912653a909477fb30aeb66c98b3a2, cd97f39b7cdf1c8a9c9f52865eec795b7f0c811d to before ff02add34ffd03449b8115904ebe2ec4fed022d4, cd97f39b7cdf1c8a9c9f52865eec795b7f0c811d to before ffbcf31f032eb454ebfd29309f51366fe57f4ac4, cd97f39b7cdf1c8a9c9f52865eec795b7f0c811d to before 4576621dc6577f21a032acfd16c3ad61907a5ea7, cd97f39b7cdf1c8a9c9f52865eec795b7f0c811d to before 617eb7c0961a8dfcfc811844a6396e406b2923ea
Linux

Linux · 2.6.29
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
File: drivers/i2c/i2c-dev.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

A malicious user can pass a large value (e.g., 429496729) that passes the `arg > INT_MAX` check but overflows when multiplied by 10. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high.

Published

CWE
CWE-190
CCR priority
22.0 /100 (P4)
CVSS 3.1
5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS
0.00129 · percentile 0.02288 · 2026-10-14
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-52948.html