CVE-2026-53151
Linux Kernel vulnerability
- Published25 Jun 2026
Description
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix the ACK parser to extract the SACK table for parsing Fix modification of the received skbuff in rxrpc_input_soft_acks() and a potential incorrect access of the buffer in a fragmented UDP packet (the packet would probably have to be deliberately pre-generated as fragmented) when AF_RXRPC tries to extract the contents of the SACK table by copying out the contents of the SACK table into a buffer before attempting to parse AF_RXRPC assumes that it can just call skb_condense() and then validly access the SACK table from skb->data and that it will be a flat buffer - but skb_condense() can silently fail to do anything under some circumstances. Note that whilst rxrpc_input_soft_acks() should be able to parse extended ACKs, the rest of AF_RXRPC doesn't currently support that. Further, there's then no need to call skb_condense() in rxrpc_input_ack(), so don't.
CVSS 3.1 breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HAffected products
Remediation
- https://git.kernel.org/stable/c/224298450be5c04d2a6ea1c2a94669d7ebf65d00
- https://git.kernel.org/stable/c/333b6d5bb9f87827ac2639c737bf9613dbae7253
- https://git.kernel.org/stable/c/566c4c1244de50fbff1f89ff93c9d7b0fc256db4
- https://git.kernel.org/stable/c/5d1ae4e17a3ecd8561cdb4f4f70152f41039c4e1
- https://git.kernel.org/stable/c/775c5e89272a2615b72bb84f611ba66fa3b7493e
References
- https://git.kernel.org/stable/c/224298450be5c04d2a6ea1c2a94669d7ebf65d00
- https://git.kernel.org/stable/c/333b6d5bb9f87827ac2639c737bf9613dbae7253
- https://git.kernel.org/stable/c/566c4c1244de50fbff1f89ff93c9d7b0fc256db4
- https://git.kernel.org/stable/c/5d1ae4e17a3ecd8561cdb4f4f70152f41039c4e1
- https://git.kernel.org/stable/c/775c5e89272a2615b72bb84f611ba66fa3b7493e
Frequently asked
Is CVE-2026-53151 being actively exploited?
CVE-2026-53151 is not in the CISA KEV catalog. Its EPSS exploit probability is 0.67%.
How severe is CVE-2026-53151?
CVE-2026-53151 has a CVSS 3.1 base score of 9.8, rated critical. EPSS estimates a 0.67% probability of exploitation.
Which products are affected by CVE-2026-53151?
Affected products include Linux Kernel.
How do I fix CVE-2026-53151?
Upgrade affected software to a fixed version, for example Linux Kernel 6.18.36 or later, then confirm no affected versions remain in your inventory.
How Secuno handles this
Secuno correlates vulnerabilities like CVE-2026-53151 against the real software inventory on every managed device, every day. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.
Data from the NVD, CISA KEV catalog and FIRST EPSS. CVSS 3.1 base score shown where available.