01 Record

CVE-2026-53381

virtiofs: fix UAF on submount umount

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

virtiofs: fix UAF on submount umount

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.14% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 3.7% of scored records. A rank, not a probability.
NVD base score: 7.8 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD analysis status: Analyzed. NVD last modified this record on 2026-08-17.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published: 2026-07-19 11:59Z1 MO AGO
Last updated: 2026-08-17 04:50Z18 DAYS AGO
Reserved: 2026-06-09
Assigning CNA: Linux
Record state: PUBLISHED
Severity: High (CVSS 7.8)
CNA CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses: No CWE assigned
Data version: 5.2
Document digest: 3e3c4f95f528b13ba09e9a3c043c828273508bef0ed14730cd52bec77d917e56

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux548e1f2bac1d4df91a6138f26bb4ab00323fd948 to < 607a1d4c42f649e6197567c0448fd9ebb316cd42, cfd1aa3e2b71f3327cb373c45a897c9028c62b35 to < 1cc0e3a0c6499aaaa2f21a4fcbba388486afb25e, 83b375c6efef69b1066ad2d79601221e7892745a to < 0b809199ff87c44487e516a725dd4be2185712ce, bfd17b6138df0122a95989457d8e18ce0b86165e to < 2181a09ba980f142650fb053666350ead4471cfe, b26923512dbe57ae4917bafd31396d22a9d1691a to < 97c4691653d145dcc699eca5d3aba3219a520f1f, 26e5c67deb2e1f42a951f022fdf5b9f7eb747b01 to < 2abfd3ffbd9452f72535d96ff3982b3ab1f8f2f9, 26e5c67deb2e1f42a951f022fdf5b9f7eb747b01 to < 39a2b95e008665c14f84e50ed411d898df7cd11b, 26e5c67deb2e1f42a951f022fdf5b9f7eb747b01 to < e09412a714bcd49375198427bb4aa005037a9d6f, 26e5c67deb2e1f42a951f022fdf5b9f7eb747b01 to < 06b41351779e9289e8785694ade9042ae85e41ea, f19a1390af448d9e193c08e28ea5f727bf3c3049, 5.10.246 to < 5.10.260, 5.15.196 to < 5.15.211, 6.1.158 to < 6.1.177, 6.6.115 to < 6.6.144, 6.12.54 to < 6.12.95, 6.17.4 to < 6.18, 6.18—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/607a1d4c42f649e6197567c0448fd9ebb316cd42
git.kernel.orghttps://git.kernel.org/stable/c/1cc0e3a0c6499aaaa2f21a4fcbba388486afb25e
git.kernel.orghttps://git.kernel.org/stable/c/0b809199ff87c44487e516a725dd4be2185712ce
git.kernel.orghttps://git.kernel.org/stable/c/2181a09ba980f142650fb053666350ead4471cfe
git.kernel.orghttps://git.kernel.org/stable/c/97c4691653d145dcc699eca5d3aba3219a520f1f
git.kernel.orghttps://git.kernel.org/stable/c/2abfd3ffbd9452f72535d96ff3982b3ab1f8f2f9
git.kernel.orghttps://git.kernel.org/stable/c/39a2b95e008665c14f84e50ed411d898df7cd11b
git.kernel.orghttps://git.kernel.org/stable/c/e09412a714bcd49375198427bb4aa005037a9d6f
git.kernel.orghttps://git.kernel.org/stable/c/06b41351779e9289e8785694ade9042ae85e41ea

01 Record index

CVE-2026-53381

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2026-53381

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References