CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2026-53075: linux kernel from 2.6.30 (inclusive), before 5.10.258 (exclusive), from 5.11 (inclusive), before 5.15.209 (exclusive)…

CVE-2026-53075. CVSS 3.1 base score 8.8 (HIGH, Source advisory). EPSS 0.0025 (percentile 0.15208), scored 15-Oct-2026.

Affected technology

linux kernel · from 2.6.30 (inclusive), before 5.10.258 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.209 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.175 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.141 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.91 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.33 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.10 (exclusive)
linux

Linux · 273ec51dd7ceaa76e038875d85061ec856d8905e to before c9edd90c57ae23692fff6b049fdfa4572a9fd532, 273ec51dd7ceaa76e038875d85061ec856d8905e to before 5080e188c914110034bbc569d5cfa2f06204681d, 273ec51dd7ceaa76e038875d85061ec856d8905e to before 67e901e28d177ac9a9bed76d69ce3471e704a89e, 273ec51dd7ceaa76e038875d85061ec856d8905e to before 954745d0223e7caec917c0b2d1a889ff56fa6e54, 273ec51dd7ceaa76e038875d85061ec856d8905e to before 3b2c2157dc2afc5c17cd7238afefca92f1ef330e, 273ec51dd7ceaa76e038875d85061ec856d8905e to before 5013be175c7ffd8b39efbc3c9c4db5b10b85fea8, 273ec51dd7ceaa76e038875d85061ec856d8905e to before 1a8a51ce85075a56a743b6f142606dd2696a391c, 273ec51dd7ceaa76e038875d85061ec856d8905e to before 2bb6379416fd19f44c3423a00bfd8626259f6067
Linux

Linux · 2.6.30
Linux

Component: Not specified by the source
File: drivers/net/ppp/ppp_generic.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

A local unprivileged user can create a new user namespace with CLONE_NEWUSER, gain CAP_NET_ADMIN only in that new user namespace, and still issue PPPIOCNEWUNIT, PPPIOCATTACH, or PPPIOCATTCHAN against an inherited network namespace. Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high.

Published

CCR priority
35.3 /100 (P4)
CVSS 3.1
8.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H · Source advisory
EPSS
0.0025 · percentile 0.15208 · 2026-10-15
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-53075.html