01 Record

CVE-2026-53245

net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.12% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 1.9% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-10-15.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published: 2026-06-25 08:39Z4 MO AGO
Last updated: 2026-10-15 01:22Z14 DAYS AGO
Reserved: 2026-06-09
Assigning CNA: Linux
Record state: PUBLISHED
Severity: Not rated by the issuing CNA
CNA CVSS vector: Not published by the issuing CNA
Weaknesses: No CWE assigned
Data version: 5.2
Document digest: 8d425339b3bdc5e417b0094fcaef5d2e8af676b27a225c4c8db796765f171eea

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxfebf018d22347b5df94066bca05d0c11a84e839d to < ae65714d96f68bb252eb20085320bdaacab36c00, febf018d22347b5df94066bca05d0c11a84e839d to < 36d259711872e3b2f6cd76a4d270c21931c0f35f, febf018d22347b5df94066bca05d0c11a84e839d to < cc98717e591a963a616fdf15ecf48eefaf45d758, febf018d22347b5df94066bca05d0c11a84e839d to < 6d6e42e8e17f18d61327f8653479c5b5e161ae1d, febf018d22347b5df94066bca05d0c11a84e839d to < fd9c3a47c670bec6b18f44454cea023f93b5adb3, febf018d22347b5df94066bca05d0c11a84e839d to < 42446ca0f3570663e87183c065e0b4def52dfba2, febf018d22347b5df94066bca05d0c11a84e839d to < 6eea6494e542a03cdf755a593b7d74f3f7c260fd, febf018d22347b5df94066bca05d0c11a84e839d to < 7561c7fbc694308da73300f036719e63e42bf0b4, 3.9—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/ae65714d96f68bb252eb20085320bdaacab36c00
git.kernel.orghttps://git.kernel.org/stable/c/36d259711872e3b2f6cd76a4d270c21931c0f35f
git.kernel.orghttps://git.kernel.org/stable/c/cc98717e591a963a616fdf15ecf48eefaf45d758
git.kernel.orghttps://git.kernel.org/stable/c/6d6e42e8e17f18d61327f8653479c5b5e161ae1d
git.kernel.orghttps://git.kernel.org/stable/c/fd9c3a47c670bec6b18f44454cea023f93b5adb3
git.kernel.orghttps://git.kernel.org/stable/c/42446ca0f3570663e87183c065e0b4def52dfba2
git.kernel.orghttps://git.kernel.org/stable/c/6eea6494e542a03cdf755a593b7d74f3f7c260fd
git.kernel.orghttps://git.kernel.org/stable/c/7561c7fbc694308da73300f036719e63e42bf0b4
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-784472.html

07 Fixed in

Debian 12

linux
Fixed in 6.1.176-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.94-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.0.13-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.