CVE-2026-53149: linux kernel from 4.15 (inclusive), before 5.10.259 (exclusive), from 5.11 (inclusive), before 5.15.210 (exclusive)…

Affected technology

linux kernel · from 4.15 (inclusive), before 5.10.259 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.210 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.176 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.143 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.94 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.36 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.13 (exclusive)
linux

linux kernel · 7.1 · update rc1
linux

linux kernel · 7.1 · update rc2
linux

linux kernel · 7.1 · update rc3
linux

linux kernel · 7.1 · update rc4
linux

linux kernel · 7.1 · update rc5
linux

linux kernel · 7.1 · update rc6
linux

linux kernel · 7.1 · update rc7
linux

Linux · cdae7c07e3e3509eaabc18c1640a55dc5b99c179 to before 5c7657d38d07268124782f03519f07c22a5814fb, cdae7c07e3e3509eaabc18c1640a55dc5b99c179 to before b212bc161d8a9937b42153723a4a3f2f74fab528, cdae7c07e3e3509eaabc18c1640a55dc5b99c179 to before 1912be23daf4afc8d24ce916021ab68ca4c679db, cdae7c07e3e3509eaabc18c1640a55dc5b99c179 to before 4d0b1524caadb04c10a71f3f88692c63dcb39115, cdae7c07e3e3509eaabc18c1640a55dc5b99c179 to before 0a32040a48db8cf35de48b85d6115df5623e4964, cdae7c07e3e3509eaabc18c1640a55dc5b99c179 to before 60ba6217460792356a238299edd675d91d46bab4, cdae7c07e3e3509eaabc18c1640a55dc5b99c179 to before cbeb68cbaa0a6f979ef428a7f2d0268c082ba166, cdae7c07e3e3509eaabc18c1640a55dc5b99c179 to before 65423079c7420e3dbf9a7aa345c243a3f5752e5d
Linux

Linux · 4.15
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
File: drivers/thunderbolt/property.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.