CVE-2026-53006

Exploitation

Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.

SSVC decision

Not assessed by CISA

EPSS probability

0.40% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 32.6% of scored records. A rank, not a probability.

NVD base score

9.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-09-03.

Red Hat severity

Important. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2026-06-24 16:29Z2 MO AGO

Last updated

2026-09-03 12:04Z1 DAY AGO

Reserved

2026-06-09

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Critical (CVSS 9.8)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

• CWE-416Use After FreeVariant
• CWE-825Expired Pointer DereferenceBase

Data version

5.2

Document digest

95a22e3720b94daf36ae153461efc10af66ecc1f45e9e78555079bc65c338c96

• git.kernel.orghttps://git.kernel.org/stable/c/7bff2c8fe5c35ae58bf73104f53db3676e6e5d94
• git.kernel.orghttps://git.kernel.org/stable/c/aff0f28f5be803de2452ce702631c021fcd9ce8a
• git.kernel.orghttps://git.kernel.org/stable/c/38bdbc897c0d83a3e2b925a51b69420f1feba29a
• git.kernel.orghttps://git.kernel.org/stable/c/0069813e6ca9309eca78022bcb3aeb1e9ef90a12
• git.kernel.orghttps://git.kernel.org/stable/c/1e1f0f89ee4692a64be3f3707ff8ac1ae57b03e7
• git.kernel.orghttps://git.kernel.org/stable/c/7c66b368c6ff453f99cb39d84af93e908e51eef2
• git.kernel.orghttps://git.kernel.org/stable/c/085e31a811ef234ef8c3e219c4636dfebfe7e10f
• git.kernel.orghttps://git.kernel.org/stable/c/f996edd7615e686ada141b7f3395025729ff8ccb
• access.redhat.comhttps://access.redhat.com/security/cve/CVE-2026-53006vdb-entryx_refsource_REDHAT
• bugzilla.redhat.comRHBZ#2492363https://bugzilla.redhat.com/show_bug.cgi?id=2492363issue-trackingx_refsource_REDHAT
• security.access.redhat.comhttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53006.jsonx_sadp-csaf-vex
• access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:47017vendor-advisoryx_refsource_REDHAT
• access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:62568vendor-advisoryx_refsource_REDHAT
• access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:45192vendor-advisoryx_refsource_REDHAT
• access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:47011vendor-advisoryx_refsource_REDHAT
• access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:61932vendor-advisoryx_refsource_REDHAT
• access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:47010vendor-advisoryx_refsource_REDHAT