P4Verified

CVE-2026-52986: linux kernel from 2.6.26 (inclusive), before 5.10.258 (exclusive), from 5.11 (inclusive), before 5.15.209 (exclusive)…

CVE-2026-52986. CVSS 3.1 base score 9.8 (CRITICAL, Source advisory). EPSS 0.00618 (percentile 0.48385), scored 14-Oct-2026.

Affected technology

linux kernel · from 2.6.26 (inclusive), before 5.10.258 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.209 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.175 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.141 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.91 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.33 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.10 (exclusive)
linux

linux kernel · 7.1 · update rc1
linux

Linux · 05e3ced297fe755093140e7487e292fb7603316e to before 8cd0358379570003659186706e077929d6930c40, 05e3ced297fe755093140e7487e292fb7603316e to before 9c6afcb1c3cbb2c0da65b8515ac14d7273872f84, 05e3ced297fe755093140e7487e292fb7603316e to before b3264c977e79d8a25778d4fd11520f00fea1329c, 05e3ced297fe755093140e7487e292fb7603316e to before ea2ecd29b8f4433e52607192ca91084f95787ca0, 05e3ced297fe755093140e7487e292fb7603316e to before 9f69c323ae0ab517e595c2cc74e0ae0d9d085611, 05e3ced297fe755093140e7487e292fb7603316e to before 7df9863bf538a626e8a684e59cb2c43eac0ef3c8, 05e3ced297fe755093140e7487e292fb7603316e to before 523762e3b6933fff81f01dfa3c60c0774044cdab, 05e3ced297fe755093140e7487e292fb7603316e to before 8cf6809cddcbe301aedfc6b51bcd4944d45795f6
Linux

Linux · 2.6.26
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/netfilter/nf_conntrack_sip.c, net/netfilter/nf_nat_sip.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 15-Oct-2026 09:20 UTC

CWE: CWE-476
CCR priority: 39.4 /100 (P4)
CVSS 3.1: 9.8 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS: 0.00618 · percentile 0.48385 · 2026-10-14
KEV: no

Provenance

FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-52986.html