P4Verified

CVE-2026-53358: linux kernel from 3.4 (inclusive), before 5.10.259 (exclusive), from 5.11 (inclusive), before 5.15.210 (exclusive)…

CVE-2026-53358. CVSS 3.1 base score 8.8 (HIGH, Source advisory). EPSS 0.00215 (percentile 0.1104), scored 14-Oct-2026.

Affected technology

linux kernel · from 3.4 (inclusive), before 5.10.259 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.210 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.176 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.143 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.93 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.35 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.12 (exclusive)
linux

linux kernel · 7.1 · update rc1
linux

linux kernel · 7.1 · update rc2
linux

linux kernel · 7.1 · update rc3
linux

linux kernel · 7.1 · update rc4
linux

linux kernel · 7.1 · update rc5
linux

Linux · 3df91ea20e744344100b10ae69a17211fcf5b207 to before 3634cbdc2eb414b69ffa752ddbe5e0458518e321, 3df91ea20e744344100b10ae69a17211fcf5b207 to before e1c100e2d61bd8c718b7d91fe3e050780a9bf72d, 3df91ea20e744344100b10ae69a17211fcf5b207 to before deb8493a8fa599f6c95e2465b12bfdfb7f94a1d9, 3df91ea20e744344100b10ae69a17211fcf5b207 to before 89dec92041717b027216e110599e4f6d6c921b79, 3df91ea20e744344100b10ae69a17211fcf5b207 to before 50dfec218808b148ab4247b1858031b7a32015c5, 3df91ea20e744344100b10ae69a17211fcf5b207 to before 859d3ace791ed878ae9ba5522c7844d960da8f88, 3df91ea20e744344100b10ae69a17211fcf5b207 to before 7555fd885a0603f50e49a655850a1f2bd8a25398, 3df91ea20e744344100b10ae69a17211fcf5b207 to before 8c8e620467a7b51562dbcefbd1f09f288d7d710d
Linux

Linux · 3.4
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
File: net/bluetooth/l2cap_sock.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 15-Oct-2026 09:20 UTC

CWE: CWE-667
CCR priority: 35.3 /100 (P4)
CVSS 3.1: 8.8 /10 · CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS: 0.00215 · percentile 0.1104 · 2026-10-14
KEV: no

Provenance

FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-53358.html