P4Verified

CVE-2026-52998: linux kernel from 2.6.31 (inclusive), before 5.10.258 (exclusive), from 5.11 (inclusive), before 5.15.209 (exclusive)…

CVE-2026-52998. CVSS 3.1 base score 7.5 (HIGH, Source advisory). EPSS 0.00564 (percentile 0.45534), scored 14-Oct-2026.

Affected technology

linux kernel · from 2.6.31 (inclusive), before 5.10.258 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.209 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.175 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.141 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.91 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.33 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.10 (exclusive)
linux

Linux · 11eeef41d5f63c7d2f7fdfcc733eb7fb137cc384 to before f4de0777e4554a7de19c920accde6319dd530782, 11eeef41d5f63c7d2f7fdfcc733eb7fb137cc384 to before c996a90f3071cf43683e5423da31aadbe002b8b4, 11eeef41d5f63c7d2f7fdfcc733eb7fb137cc384 to before edc806f9122961f0d3819f7c69c14cccde31f277, 11eeef41d5f63c7d2f7fdfcc733eb7fb137cc384 to before 5d05de2f0928d81309a815ecc76d1a3ad72cbc16, 11eeef41d5f63c7d2f7fdfcc733eb7fb137cc384 to before 95be653a76793856ff8b2d8bd82c2943c23f5ca8, 11eeef41d5f63c7d2f7fdfcc733eb7fb137cc384 to before 79b90a96688e521771fa6ed3dc7864b76b8df293, 11eeef41d5f63c7d2f7fdfcc733eb7fb137cc384 to before 83fc5dd63455a779ea2dd0f7ffee3c920919d80b, 11eeef41d5f63c7d2f7fdfcc733eb7fb137cc384 to before 711987ba281fd806322a7cd244e98e2a81903114
Linux

Linux · 2.6.31
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
Function: accessed
File: net/netfilter/nfnetlink_osf.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 15-Oct-2026 09:20 UTC

CWE: CWE-476
CCR priority: 30.1 /100 (P4)
CVSS 3.1: 7.5 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · Source advisory
EPSS: 0.00564 · percentile 0.45534 · 2026-10-14
KEV: no

Provenance

FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-52998.html