CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2026-52999: linux kernel 5.0; +4 more affected products

CVE-2026-52999. CVSS 3.1 base score 9.1 (CRITICAL, Source advisory). EPSS 0.00576 (percentile 0.46157), scored 14-Oct-2026.

Affected technology

linux kernel · from 4.19.26 (inclusive), before 4.20 (exclusive)
linux

linux kernel · from 4.20.13 (inclusive), before 5.0 (exclusive)
linux

linux kernel · from 5.0.1 (inclusive), before 5.10.258 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.209 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.175 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.141 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.91 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.33 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.10 (exclusive)
linux

linux kernel · 5.0
linux

linux kernel · 5.0 · update rc5
linux

linux kernel · 5.0 · update rc6
linux

linux kernel · 5.0 · update rc7
linux

linux kernel · 5.0 · update rc8
linux

Linux · 1a6a0951fc009f6d9fe8ebea2d2417d80d54097b to before 0145548346c4a30981a870a8ca00eac46ba27e85, 1a6a0951fc009f6d9fe8ebea2d2417d80d54097b to before 1c136f2c44a5913646bac85303612fd0825197a0, 1a6a0951fc009f6d9fe8ebea2d2417d80d54097b to before 1e19a07291bb8682c14c39a64725a3ae54ab8ccc, 1a6a0951fc009f6d9fe8ebea2d2417d80d54097b to before 32e50f92c7cf3f4eba29622179a5fcdc2aebab41, 1a6a0951fc009f6d9fe8ebea2d2417d80d54097b to before 70a3f31d25cf2ec9d4ddfa408120171ead955623, 1a6a0951fc009f6d9fe8ebea2d2417d80d54097b to before 21883587593d7c8bb519a79460a0b5bc5ffbdabd, 1a6a0951fc009f6d9fe8ebea2d2417d80d54097b to before edb78a142d2e5948e63647c0646aa7e7886935f0, 1a6a0951fc009f6d9fe8ebea2d2417d80d54097b to before f5ca450087c3baf3651055e7a6de92600f827af3, 0c1054e0e5fdef2369fb089e94def978bd209e1f, 8316b60582facd4068fb0916c4db2418c21b7174, 4.19.26 to before 4.20, 4.20.13 to before 4.21
Linux

Linux · 5.0
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
Function: returns
File: net/netfilter/nfnetlink_osf.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-125
CCR priority
36.5 /100 (P4)
CVSS 3.1
9.1 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H · Source advisory
EPSS
0.00576 · percentile 0.46157 · 2026-10-14
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-52999.html