Get real-time updates on Telegram
CVE-2026-52967: linux kernel from 6.0.16 (inclusive), before 6.1.175 (exclusive), from 6.2 (inclusive), before 6.6.141 (exclusive)…
CVE-2026-52967. CVSS 3.1 base score 8.1 (HIGH, Source advisory). EPSS 0.00393 (percentile 0.31812), scored 15-Oct-2026.
Affected technology
linux kernel · from 6.0.16 (inclusive), before 6.1.175 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.141 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.91 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.33 (exclusive)
linux
linux kernel · from 6.19 (inclusive), before 7.0.10 (exclusive)
linux
linux kernel · 7.1 · update rc1
linux
linux kernel · 7.1 · update rc2
linux
linux kernel · 7.1 · update rc3
linux
Linux · 76894f3e2f71177747b8b4763fb180e800279585 to before 1cfa2d59f669db28d6292d10ff87ca6837c781b0, 76894f3e2f71177747b8b4763fb180e800279585 to before b41598bf54b3fe528994e573df6008f8f4d0a4f4, 76894f3e2f71177747b8b4763fb180e800279585 to before cd4b9b662f0fb9aa97ee6bf9034eca76fc6cab23, 76894f3e2f71177747b8b4763fb180e800279585 to before 97a05b0ae9ea5ec052be2eef0f9cc7ce03501bbb, 76894f3e2f71177747b8b4763fb180e800279585 to before 1b9331b16b0ed9414dcf7583d8134bdfeb117aae, 76894f3e2f71177747b8b4763fb180e800279585 to before 7d9a7f1f96cd617ee9e75bb22217c709038e26b8, 2d046892a493d9760c35fdaefc3017f27f91b621, 6.0.16 to before 6.1
Linux
Linux · 6.1
Linux
Component: Not specified by the source
File: fs/smb/client/smb2file.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · User interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 8.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-125
- CCR priority
- 32.5 /100 (P4)
- CVSS 3.1
- 8.1 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H · Source advisory
- EPSS
- 0.00393 · percentile 0.31812 · 2026-10-15
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-16 16:55:38.548135+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-52967.html