CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2026-53186: linux kernel from 2.6.15 (inclusive), before 5.10.259 (exclusive), from 5.11 (inclusive), before 5.15.210 (exclusive)…

CVE-2026-53186. CVSS 3.1 base score 9.1 (CRITICAL, Source advisory). EPSS 0.00514 (percentile 0.42434), scored 15-Oct-2026.

Affected technology

linux kernel · from 2.6.15 (inclusive), before 5.10.259 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.210 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.176 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.143 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.94 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.36 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.13 (exclusive)
linux

linux kernel · 7.1 · update rc1
linux

linux kernel · 7.1 · update rc2
linux

linux kernel · 7.1 · update rc3
linux

linux kernel · 7.1 · update rc4
linux

linux kernel · 7.1 · update rc5
linux

linux kernel · 7.1 · update rc6
linux

linux kernel · 7.1 · update rc7
linux

Linux · aef9ec39c47f0cece886ddd6b53c440321e0b2a6 to before 3889517c2ec7f364914aea8209abfff735f7ecde, aef9ec39c47f0cece886ddd6b53c440321e0b2a6 to before ed77cc819ad631264787cade5ae5ec4c535ec6bb, aef9ec39c47f0cece886ddd6b53c440321e0b2a6 to before 0b9ee09d5e849591f17d98c078033dadea967293, aef9ec39c47f0cece886ddd6b53c440321e0b2a6 to before 0d64bc200ebe4f275b27438c6e593903e0b16fe1, aef9ec39c47f0cece886ddd6b53c440321e0b2a6 to before 2015038195939eac54a1ee83c9d98ef1a8ccbbce, aef9ec39c47f0cece886ddd6b53c440321e0b2a6 to before f92a285db7ff6e598591ccbfb551be155c5f4d57, aef9ec39c47f0cece886ddd6b53c440321e0b2a6 to before 3523e53ff95f1837ec3f57ff7558532bcb2661b7, aef9ec39c47f0cece886ddd6b53c440321e0b2a6 to before 13e91fd076306f5d0cdfa14f53d69e37274723c4
Linux

Linux · 2.6.15
Linux

Component: Not specified by the source
File: drivers/infiniband/ulp/srp/ib_srp.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CCR priority
36.5 /100 (P4)
CVSS 3.1
9.1 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H · Source advisory
EPSS
0.00514 · percentile 0.42434 · 2026-10-15
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-53186.html