CVE-2026-53362: Linux Kernel Unspecified Vulnerability

What it is

Linux Kernel contains an unspecified vulnerability that can allow for privilege escalation via IPv6 networking subsystem. This vulnerability can impact multiple products, including but not limited to Suse, Red Hat, and other products using Linux.

What to do

Schedule the vendor fix into this week’s change window, prioritising internet-facing and business-critical systems. Confirm the fix is applied everywhere, not just where it was easy.

Priority

This week: Schedule into this week’s change window.

Severity (CVSS)

7.8 high

CISA assessment (SSVC)

actively exploited; needs manual effort per target; total control of the affected system

Exploit probability (EPSS, 30 days)

0.7%, higher than 52% of all CVEs

Added to CISA KEV

27 August 2026

CISA fix-by date

30 August 2026 (US federal agencies; a sensible deadline for everyone)

Ransomware use

Not known

Weakness

CWE-787, CWE-122

References

• NIST NVD entry
• CISA KEV entry
• git.kernel.org/stable/c/14200d435af9a9eeb444f529fc2f689a236b7962
• git.kernel.org/stable/c/46f201f8b4c39633a1fa3dc12459f506d470993d
• git.kernel.org/stable/c/6374fb9edf72c67a118a2c214a0dddd04c921e0a
• git.kernel.org/stable/c/65fb14cbebb0cd0eff903a22d33537ddc8b95769
• git.kernel.org/stable/c/736b380e28d0480c7bc3e022f1950f31fe53a7c5
• git.kernel.org/stable/c/e9eacf19281ea2498b36291b56c9606118c2d74e

Sources: CISA Known Exploited Vulnerabilities · FIRST Exploit Prediction Scoring System (EPSS) · NIST National Vulnerability Database · CISA Vulnrichment (SSVC), via the CVE Program. This product uses data from the NVD API but is not endorsed or certified by the NVD. Summaries are machine-written from CISA’s description; treat the vendor’s advisory as the authority for fixes.