Get real-time updates on Telegram
CVE-2026-52948: linux kernel 2.6.29; +2 more affected products
CVE-2026-52948. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00129 (percentile 0.02288), scored 14-Oct-2026.
Affected technology
linux kernel · from 2.6.29.1 (inclusive), before 5.10.259 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.210 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.176 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.143 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.94 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.36 (exclusive)
linux
linux kernel · from 6.19 (inclusive), before 7.0.13 (exclusive)
linux
linux kernel · 2.6.29
linux
linux kernel · 2.6.29 · update rc7
linux
linux kernel · 2.6.29 · update rc8
linux
linux kernel · 7.1 · update rc1
linux
linux kernel · 7.1 · update rc2
linux
Linux · cd97f39b7cdf1c8a9c9f52865eec795b7f0c811d to before e9ffd5f5050fbb199d270a85614cd27ebed6fbac, cd97f39b7cdf1c8a9c9f52865eec795b7f0c811d to before 0b88ecfbc9dc33b4db8836c37b50cf174e6c0691, cd97f39b7cdf1c8a9c9f52865eec795b7f0c811d to before 943e318eedbeaeea08ece3f5dd44c982f4ed2ef5, cd97f39b7cdf1c8a9c9f52865eec795b7f0c811d to before aa6ef734016912653a909477fb30aeb66c98b3a2, cd97f39b7cdf1c8a9c9f52865eec795b7f0c811d to before ff02add34ffd03449b8115904ebe2ec4fed022d4, cd97f39b7cdf1c8a9c9f52865eec795b7f0c811d to before ffbcf31f032eb454ebfd29309f51366fe57f4ac4, cd97f39b7cdf1c8a9c9f52865eec795b7f0c811d to before 4576621dc6577f21a032acfd16c3ad61907a5ea7, cd97f39b7cdf1c8a9c9f52865eec795b7f0c811d to before 617eb7c0961a8dfcfc811844a6396e406b2923ea
Linux
Linux · 2.6.29
Linux
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens
Component: Not specified by the source
File: drivers/i2c/i2c-dev.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
A malicious user can pass a large value (e.g., 429496729) that passes the `arg > INT_MAX` check but overflows when multiplied by 10. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high.
- CWE
- CWE-190
- CCR priority
- 22.0 /100 (P4)
- CVSS 3.1
- 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
- EPSS
- 0.00129 · percentile 0.02288 · 2026-10-14
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-52948.html