Secuno
ENNL
Book demo

CVE-2026-53091

Linux Kernel vulnerability

8.4 HIGHEPSS 0.14%
  1. Published24 Jun 2026

Description

In the Linux kernel, the following vulnerability has been resolved: net: pull headers in qdisc_pkt_len_segs_init() Most ndo_start_xmit() methods expects headers of gso packets to be already in skb->head. net/core/tso.c users are particularly at risk, because tso_build_hdr() does a memcpy(hdr, skb->data, hdr_len); qdisc_pkt_len_segs_init() already does a dissection of gso packets. Use pskb_may_pull() instead of skb_header_pointer() to make sure drivers do not have to reimplement this. Some malicious packets could be fed, detect them so that we can drop them sooner with a new SKB_DROP_REASON_SKB_BAD_GSO drop_reason.

CVSS 3.1 breakdown

Attack vectorLocal
Attack complexityLow
Privileges requiredLow
User interactionNone
ScopeChanged
ConfidentialityHigh
IntegrityNone
AvailabilityHigh
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H

Affected products

Linux Kernel≥ 3.16 < 7.0.10

Remediation

Fixed in
Linux Kernel≥ 7.0.10

References

Related CVEs

Recent high-severity vulnerabilities sharing a weakness type.

CVE-2026-134668.1
Incorrect calculation of buffer size vulnerability in Altera Trusted Firmware on HPS…
CVE-2026-225909.1
eprosima Fast DDS is a C++ implementation of the DDS (Data Distribution Service)…
CVE-2026-695988.8
Incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker…
CVE-2026-529559.8
In the Linux kernel, the following vulnerability has been resolved: libceph: Fix…
CVE-2026-420558.1
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module…
CVE-2026-498419.8
FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from…

Frequently asked

Is CVE-2026-53091 being actively exploited?

CVE-2026-53091 is not in the CISA KEV catalog. Its EPSS exploit probability is 0.14%.

How severe is CVE-2026-53091?

CVE-2026-53091 has a CVSS 3.1 base score of 8.4, rated high. EPSS estimates a 0.14% probability of exploitation.

Which products are affected by CVE-2026-53091?

Affected products include Linux Kernel.

How do I fix CVE-2026-53091?

Upgrade affected software to a fixed version, for example Linux Kernel 7.0.10 or later, then confirm no affected versions remain in your inventory.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2026-53091 against the real software inventory on every managed device, every day. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation worksBook a demo

Get Patch this first every Monday

Five vulnerabilities that matter this week, ranked on real exploitation. Plain language, one email, no spam.

You can unsubscribe with one click from every issue. We handle your details as described in our privacy policy.

Data from the NVD, CISA KEV catalog and FIRST EPSS. CVSS 3.1 base score shown where available.