P4Verified

CVE-2026-53221: linux kernel from 3.19 (inclusive), before 5.10.259 (exclusive), from 5.11 (inclusive), before 5.15.210 (exclusive)…

CVE-2026-53221. CVSS 3.1 base score 9.8 (CRITICAL, Source advisory). EPSS 0.00514 (percentile 0.42365), scored 14-Oct-2026.

Affected technology

linux kernel · from 3.19 (inclusive), before 5.10.259 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.210 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.176 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.143 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.94 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.36 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.13 (exclusive)
linux

linux kernel · 7.1 · update rc1
linux

linux kernel · 7.1 · update rc2
linux

linux kernel · 7.1 · update rc3
linux

linux kernel · 7.1 · update rc4
linux

linux kernel · 7.1 · update rc5
linux

linux kernel · 7.1 · update rc6
linux

linux kernel · 7.1 · update rc7
linux

Linux · fbe68ee87522f6eaa10f9076c0a7117e1613f2f7 to before c327fa4fca31415431202e063767a7ae342e19c6, fbe68ee87522f6eaa10f9076c0a7117e1613f2f7 to before fc657ac0767c49839b3ef0b08dc0953ca30883f8, fbe68ee87522f6eaa10f9076c0a7117e1613f2f7 to before 47fb3c2b4203556308e64354b3e78f2ce221d646, fbe68ee87522f6eaa10f9076c0a7117e1613f2f7 to before f513f308cc4bdb4530d033431592ffbc29b7fca1, fbe68ee87522f6eaa10f9076c0a7117e1613f2f7 to before 90fd4513315ca07da99cfd8549d3e553a7160f0d, fbe68ee87522f6eaa10f9076c0a7117e1613f2f7 to before 2abfb19bbb81958714ad1d43ebeb65b30394184b, fbe68ee87522f6eaa10f9076c0a7117e1613f2f7 to before 2fc7bc087cc7085368263d9d37bfe9a0bddd6a2d, fbe68ee87522f6eaa10f9076c0a7117e1613f2f7 to before a5c0359f5cbc51a2e2b114d6041e0f3c73f903e9
Linux

Linux · 3.19
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
File: net/ipv6/ip6_vti.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 15-Oct-2026 09:20 UTC

CCR priority: 39.3 /100 (P4)
CVSS 3.1: 9.8 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS: 0.00514 · percentile 0.42365 · 2026-10-14
KEV: no

Provenance

FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-53221.html