Get real-time updates on Telegram
CVE-2026-52955: linux kernel 2.6.34; +6 more affected products
CVE-2026-52955. CVSS 3.1 base score 9.8 (CRITICAL, Source advisory). EPSS 0.0038 (percentile 0.30367), scored 15-Oct-2026.
Affected technology
linux kernel · from 2.6.34.1 (inclusive), before 5.10.258 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.209 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.175 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.141 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.91 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.33 (exclusive)
linux
linux kernel · from 6.19 (inclusive), before 7.0.10 (exclusive)
linux
linux kernel · 2.6.34
linux
linux kernel · 2.6.34 · update rc2
linux
linux kernel · 2.6.34 · update rc3
linux
linux kernel · 2.6.34 · update rc4
linux
linux kernel · 2.6.34 · update rc5
linux
linux kernel · 2.6.34 · update rc6
linux
linux kernel · 2.6.34 · update rc7
linux
linux kernel · 7.1 · update rc1
linux
linux kernel · 7.1 · update rc2
linux
linux kernel · 7.1 · update rc3
linux
Linux · f24e9980eb860d8600cbe5ef3d2fd9295320d229 to before 6e70ef53e818c53eab28d7b0026b7fd03dddaba5, f24e9980eb860d8600cbe5ef3d2fd9295320d229 to before ebe76d58a48a48031b98543d86c4cd30a825b622, f24e9980eb860d8600cbe5ef3d2fd9295320d229 to before 3f42508191e129ee6b5ea96578d5cab14f2a013a, f24e9980eb860d8600cbe5ef3d2fd9295320d229 to before ea0d42137f0c06da71e37ffc647aab4c5309599a, f24e9980eb860d8600cbe5ef3d2fd9295320d229 to before cceb10023e76bc89f3fe9238ebd0ccab0fc7c7c5, f24e9980eb860d8600cbe5ef3d2fd9295320d229 to before 0f3604cbe4df14c5e58288ac9f57511e726a222d, f24e9980eb860d8600cbe5ef3d2fd9295320d229 to before fb176a99e4c1a5a8448a83d83d3606203ba81faa, f24e9980eb860d8600cbe5ef3d2fd9295320d229 to before 4c79fc2d598694bda845b46229c9d48b65042970
Linux
Linux · 2.6.34
Linux
Red Hat Enterprise Linux 10 · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 6 · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 7 · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 8 · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 9 · Exact affected versions not specified by the source
Red Hat
Component: Not specified by the source
File: net/ceph/crush/crush.c, net/ceph/osdmap.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-125, CWE-131
- CCR priority
- 39.3 /100 (P4)
- CVSS 3.1
- 9.8 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.0038 · percentile 0.30367 · 2026-10-15
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-16 16:55:38.548135+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-52955.html