CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2026-52955: linux kernel 2.6.34; +6 more affected products

CVE-2026-52955. CVSS 3.1 base score 9.8 (CRITICAL, Source advisory). EPSS 0.0038 (percentile 0.30367), scored 15-Oct-2026.

Affected technology

linux kernel · from 2.6.34.1 (inclusive), before 5.10.258 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.209 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.175 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.141 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.91 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.33 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.10 (exclusive)
linux

linux kernel · 2.6.34
linux

linux kernel · 2.6.34 · update rc2
linux

linux kernel · 2.6.34 · update rc3
linux

linux kernel · 2.6.34 · update rc4
linux

linux kernel · 2.6.34 · update rc5
linux

linux kernel · 2.6.34 · update rc6
linux

linux kernel · 2.6.34 · update rc7
linux

linux kernel · 7.1 · update rc1
linux

linux kernel · 7.1 · update rc2
linux

linux kernel · 7.1 · update rc3
linux

Linux · f24e9980eb860d8600cbe5ef3d2fd9295320d229 to before 6e70ef53e818c53eab28d7b0026b7fd03dddaba5, f24e9980eb860d8600cbe5ef3d2fd9295320d229 to before ebe76d58a48a48031b98543d86c4cd30a825b622, f24e9980eb860d8600cbe5ef3d2fd9295320d229 to before 3f42508191e129ee6b5ea96578d5cab14f2a013a, f24e9980eb860d8600cbe5ef3d2fd9295320d229 to before ea0d42137f0c06da71e37ffc647aab4c5309599a, f24e9980eb860d8600cbe5ef3d2fd9295320d229 to before cceb10023e76bc89f3fe9238ebd0ccab0fc7c7c5, f24e9980eb860d8600cbe5ef3d2fd9295320d229 to before 0f3604cbe4df14c5e58288ac9f57511e726a222d, f24e9980eb860d8600cbe5ef3d2fd9295320d229 to before fb176a99e4c1a5a8448a83d83d3606203ba81faa, f24e9980eb860d8600cbe5ef3d2fd9295320d229 to before 4c79fc2d598694bda845b46229c9d48b65042970
Linux

Linux · 2.6.34
Linux

Red Hat Enterprise Linux 10 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 6 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 7 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9 · Exact affected versions not specified by the source
Red Hat

Component: Not specified by the source
File: net/ceph/crush/crush.c, net/ceph/osdmap.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-125, CWE-131
CCR priority
39.3 /100 (P4)
CVSS 3.1
9.8 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS
0.0038 · percentile 0.30367 · 2026-10-15
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-52955.html