Skip to content
IROSG.
Vulnerability intelligence

CVE-2026-53362: Linux Kernel

A sourced defensive profile of CVE-2026-53362 affecting Linux Kernel. CVSS 7.8; CISA KEV addition: 2026-08-27.

Security illustration for CVE-2026-53362 and Linux
IdentifierCVE-2026-53362
Vendor / productLinux / Kernel
Severity scoreCVSS 7.83.1 · Linux
Added to CISA KEV2026-08-27

A KEV listing indicates evidence of real-world exploitation—not that every installation is compromised. Check your version, configuration and the vendor’s advisory.

Verified reference description

The following technical description is credited to the CISA KEV dataset (CC0):

Linux Kernel contains an unspecified vulnerability that can allow for privilege escalation via IPv6 networking subsystem. This vulnerability can impact multiple products, including but not limited to Suse, Red Hat, and other products using Linux.

Record and timeline

  • Product: Linux — Kernel
  • Identifier: CVE-2026-53362
  • CVE record published: 2026-07-04
  • Added to CISA KEV: 2026-08-27
  • Reference score: 7.8/10, CVSS 3.1; provider: Linux
  • Weakness class: Not specified in the KEV entry

A KEV addition date is not a discovery date. CVSS describes technical severity; actual exposure and asset importance also influence remediation priority.

Defensive next steps

Match the installed Linux Kernel version and configuration against the linked technical advisory. Apply the manufacturer-approved fixed release or an explicitly documented mitigation; this profile does not guess a fixed version. Verify the patch and review relevant logs afterward. Plan a supported replacement where the product is end-of-life.

Scope and limitations

This is an awareness and defensive-prioritization profile, not a penetration test or a finding that your network is compromised. KEV membership indicates evidence of real-world exploitation. Mandatory CISA deadlines apply to entities covered by the relevant directive, not universally to every reader.

Reported versions and platforms

The table shows up to ten structured version entries from the official CVE-2026-53362 record. Original field names and values are retained deliberately. This is not an automated exposure verdict or a complete list of every product branch; use the full record and vendor advisory for a deployment decision.

Product in record Platform Version fields — original values Record status
Linux — Linux — version=773ba4fe9104a64a54d1c00f0fb6ffb95def2b03; lessThan=14200d435af9a9eeb444f529fc2f689a236b7962; versionType=git affected
Linux — Linux — version=773ba4fe9104a64a54d1c00f0fb6ffb95def2b03; lessThan=65fb14cbebb0cd0eff903a22d33537ddc8b95769; versionType=git affected
Linux — Linux — version=773ba4fe9104a64a54d1c00f0fb6ffb95def2b03; lessThan=46f201f8b4c39633a1fa3dc12459f506d470993d; versionType=git affected
Linux — Linux — version=773ba4fe9104a64a54d1c00f0fb6ffb95def2b03; lessThan=6374fb9edf72c67a118a2c214a0dddd04c921e0a; versionType=git affected
Linux — Linux — version=773ba4fe9104a64a54d1c00f0fb6ffb95def2b03; lessThan=e9eacf19281ea2498b36291b56c9606118c2d74e; versionType=git affected
Linux — Linux — version=773ba4fe9104a64a54d1c00f0fb6ffb95def2b03; lessThan=736b380e28d0480c7bc3e022f1950f31fe53a7c5; versionType=git affected
Linux — Linux — version=6.0 affected
Linux — Linux — version=0; lessThan=6.0; versionType=semver unaffected
Linux — Linux — version=6.1.177; lessThanOrEqual=6.1.*; versionType=semver unaffected
Linux — Linux — version=6.6.144; lessThanOrEqual=6.6.*; versionType=semver unaffected

Full record and technical references

Turn the record into an operational decision

For Linux Kernel, record the asset, effective version, enabled feature and access path. When the reference does not map clearly to your package or branch, retain an explicit unknown status and assign follow-up rather than guessing that the system is safe.

After remediation, record the effective running version, health-check outcome and change time, not merely installation success. Evidence of compromise requires the appropriate incident-response workflow; this page does not diagnose any network as compromised or clean.

Scoring vector and scope

Vector recorded by the reference: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS is owned by FIRST and used by permission. The reference score is not a substitute for organizational risk assessment. Version data comes from the record retrieved for this review and may change when sources are updated.

TRACEABLE KNOWLEDGE

Sources & further reading

01
CISA Known Exploited Vulnerabilities — CC0 datahttps://www.cisa.gov/known-exploited-vulnerabilities-catalog
02
CVE Program record — CVE-2026-53362https://www.cve.org/CVERecord?id=CVE-2026-53362
03
CVSS 3.1 — Linuxhttps://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/53xxx/CVE-2026-53362.json
04
اطلاعیهٔ فنی / Technical advisoryhttps://git.kernel.org/stable/c/14200d435af9a9eeb444f529fc2f689a236b7962
05
FIRST CVSS specification — metric definitionshttps://www.first.org/cvss/v3.1/specification-document

Editorial review date:

IROSG / EDITORIAL

News and pioneer profiles use original writing with source attribution. Image credits and licenses are kept in each page’s sources section instead of beneath the images. CVE reference data credits its primary sources.

Editorial and image policy ↗