01 Record

CVE-2026-53362

ipv6: account for fraggap on the paged allocation path

HighKEVPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

ipv6: account for fraggap on the paged allocation path

03 Exploitation and scoring

Exploitation

Exploited in the wild. Listed in the CISA Known Exploited Vulnerabilities catalog on 2026-08-27. Federal remediation due 2026-08-30.

SSVC decision

ExploitationactiveCISA reports credible evidence of active exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpacttotalSuccessful exploitation gives total control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.27% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 18.4% of scored records. A rank, not a probability.

NVD base score

7.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-08-27.

Red Hat severity

Important. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-07-04 11:56Z1 MO AGO

Last updated

2026-08-27 19:58Z8 HR AGO

Reserved

2026-06-09

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-122Heap-based Buffer OverflowVariant

Data version

5.2

Document digest

39853cfd56358c8eaa6c1864325da7b208064cf979e86bf64c87ca5659c47a34

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux773ba4fe9104a64a54d1c00f0fb6ffb95def2b03 to < 14200d435af9a9eeb444f529fc2f689a236b7962, 773ba4fe9104a64a54d1c00f0fb6ffb95def2b03 to < 65fb14cbebb0cd0eff903a22d33537ddc8b95769, 773ba4fe9104a64a54d1c00f0fb6ffb95def2b03 to < 46f201f8b4c39633a1fa3dc12459f506d470993d, 773ba4fe9104a64a54d1c00f0fb6ffb95def2b03 to < 6374fb9edf72c67a118a2c214a0dddd04c921e0a, 773ba4fe9104a64a54d1c00f0fb6ffb95def2b03 to < e9eacf19281ea2498b36291b56c9606118c2d74e, 773ba4fe9104a64a54d1c00f0fb6ffb95def2b03 to < 736b380e28d0480c7bc3e022f1950f31fe53a7c5, 6.0—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/14200d435af9a9eeb444f529fc2f689a236b7962
git.kernel.orghttps://git.kernel.org/stable/c/65fb14cbebb0cd0eff903a22d33537ddc8b95769
git.kernel.orghttps://git.kernel.org/stable/c/46f201f8b4c39633a1fa3dc12459f506d470993d
git.kernel.orghttps://git.kernel.org/stable/c/6374fb9edf72c67a118a2c214a0dddd04c921e0a
git.kernel.orghttps://git.kernel.org/stable/c/e9eacf19281ea2498b36291b56c9606118c2d74e
git.kernel.orghttps://git.kernel.org/stable/c/736b380e28d0480c7bc3e022f1950f31fe53a7c5
www.cisa.govhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-53362government-resource

CVE-2026-53362

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Description

03 Metadata

04 Affected products

05 References

CVE-2026-53362

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References