P4Verified

CVE-2026-53228: linux kernel from 3.18 (inclusive), before 5.10.259 (exclusive), from 5.11 (inclusive), before 5.15.210 (exclusive)…

CVE-2026-53228. CVSS 3.1 base score 9.8 (CRITICAL, Source advisory). EPSS 0.00514 (percentile 0.42366), scored 14-Oct-2026.

Affected technology

linux kernel · from 3.18 (inclusive), before 5.10.259 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.210 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.176 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.143 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.94 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.36 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.13 (exclusive)
linux

linux kernel · 7.1 · update rc1
linux

linux kernel · 7.1 · update rc2
linux

linux kernel · 7.1 · update rc3
linux

linux kernel · 7.1 · update rc4
linux

linux kernel · 7.1 · update rc5
linux

linux kernel · 7.1 · update rc6
linux

linux kernel · 7.1 · update rc7
linux

Linux · 14909664e4e192f4c6f6fcdccd9919af7cf783ab to before fddd41445a0537b093e6b3f6232c9933cad1e48b, 14909664e4e192f4c6f6fcdccd9919af7cf783ab to before 1132e5edc2866c3530be17622153a597095f0e43, 14909664e4e192f4c6f6fcdccd9919af7cf783ab to before 9c67b44edb3598d234efae6e44649eb993c03da5, 14909664e4e192f4c6f6fcdccd9919af7cf783ab to before 0bfa7bba1f41aaf5f0604dc712bb4701493e3aa0, 14909664e4e192f4c6f6fcdccd9919af7cf783ab to before 59f80c919713250fe5d25a4d9aea4e49580fa1d4, 14909664e4e192f4c6f6fcdccd9919af7cf783ab to before 2fa49b2715e1bad12ce3b0fa64e234d9582c8193, 14909664e4e192f4c6f6fcdccd9919af7cf783ab to before cb658c2f5f7977c2a1c77c9f239f4bc8196edb5c, 14909664e4e192f4c6f6fcdccd9919af7cf783ab to before f0e42f0c4337b1f220de1ddd63f47197c7dee4de
Linux

Linux · 3.18
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
Function: entry
File: net/ipv6/sit.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 15-Oct-2026 09:20 UTC

CCR priority: 39.3 /100 (P4)
CVSS 3.1: 9.8 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS: 0.00514 · percentile 0.42366 · 2026-10-14
KEV: no

Provenance

FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-53228.html