Get real-time updates on Telegram
CVE-2026-89554: Linux 5.9
CVE-2026-89554. CVSS 3.1 base score 8.2 (HIGH, Source advisory). EPSS 0.00598 (percentile 0.47473), scored 15-Oct-2026.
Affected technology
Linux · 9466a1ccebbe54ac57fb8a89c2b4b854826546a8 to before 4534e0eead692bb069ad1e6a5a245fc2e2078300, 9466a1ccebbe54ac57fb8a89c2b4b854826546a8 to before 63cacb05e51a1c6e1349d2e593d00fd6ef43def4, 9466a1ccebbe54ac57fb8a89c2b4b854826546a8 to before 954b5ea836eb118d188975ced803448537ab8479, 9466a1ccebbe54ac57fb8a89c2b4b854826546a8 to before 9df36a4846375a9b75bf42d77bfed216b0f366f9, 9466a1ccebbe54ac57fb8a89c2b4b854826546a8 to before 64f2c5dd49b956a542c8c02b8dad5d262a462bba, 9466a1ccebbe54ac57fb8a89c2b4b854826546a8 to before 51887ccd88791ddaa8755a7c614fda031ecf7982, 9466a1ccebbe54ac57fb8a89c2b4b854826546a8 to before bf19d166337c6488b39cb03eeeffb30a941d6326, 9466a1ccebbe54ac57fb8a89c2b4b854826546a8 to before b878dfdd12d7a5b8722a78d35e313506140ca3d9
Linux
Linux · 5.9
Linux
Component: Not specified by the source
File: net/mptcp/syncookies.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 8.2/10) rates confidentiality impact as none; integrity impact as low; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 32.9 /100 (P4)
- CVSS 3.1
- 8.2 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H · Source advisory
- EPSS
- 0.00598 · percentile 0.47473 · 2026-10-15
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-16 20:20:42.059737+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-89554.html