CVE-2026-53006

Description

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible UAF in icmpv6_rcv() Caching saddr and daddr before pskb_pull() is problematic since skb->head can change. Remove these temporary variables: - We only access &ipv6_hdr(skb)->saddr and &ipv6_hdr(skb)->daddr when net_dbg_ratelimited() is called in the slow path. - Avoid potential future misuse after pskb_pull() call.

CVSS v3.1 Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploit Prediction

0.0038

Probability of exploitation

0.30%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

Weakness Type (CWE)

CWE-825 CWE-825

References

Other References

https://git.kernel.org/stable/c/0069813e6ca9309eca78022bcb3aeb1e9ef90a12 https://git.kernel.org/stable/c/085e31a811ef234ef8c3e219c4636dfebfe7e10f https://git.kernel.org/stable/c/1e1f0f89ee4692a64be3f3707ff8ac1ae57b03e7 https://git.kernel.org/stable/c/38bdbc897c0d83a3e2b925a51b69420f1feba29a https://git.kernel.org/stable/c/7bff2c8fe5c35ae58bf73104f53db3676e6e5d94 https://git.kernel.org/stable/c/7c66b368c6ff453f99cb39d84af93e908e51eef2 https://git.kernel.org/stable/c/aff0f28f5be803de2452ce702631c021fcd9ce8a https://git.kernel.org/stable/c/f996edd7615e686ada141b7f3395025729ff8ccb https://access.redhat.com/security/cve/CVE-2026-53006 https://bugzilla.redhat.com/show_bug.cgi?id=2492363

Frequently Asked Questions

What is CVE-2026-53006? +

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible UAF in icmpv6_rcv() Caching saddr and daddr before pskb_pull() is problematic since skb->head can change. Remove these temporary variables: - We only access &ipv6_hdr(skb)->saddr and &ipv6_hdr(skb)->daddr when net_dbg_ratelimited() is called in the slow path. - Avoid potential future misuse after pskb_pull() call. It has a CVSS v3.1 base score of 9.8 (CRITICAL).

How severe is CVE-2026-53006? +

CVE-2026-53006 has a CVSS v3.1 score of 9.8 out of 10, rated CRITICAL. This is a critical vulnerability that should be patched immediately. The EPSS score is 0.0038, placing it in the 0th percentile for exploitation probability.

How do I check if I'm vulnerable to CVE-2026-53006? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2026-52924 9.8

In the Linux kernel, the following vulnerability has been resolved: sctp: purge outqueue on stale COOKIE-ECHO handling sctp_stream_update() is only …

CVE-2024-23310 9.8

A use-after-free vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A specially …

CVE-2025-49794 9.1

A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML …

CVE-2026-52952 8.8

In the Linux kernel, the following vulnerability has been resolved: iommu: Fix WARN_ON in __iommu_group_set_domain_nofail() due to reset In __iommu_group_set_domain_internal(), …

CVE-2026-7111 8.4

Text::CSV_XS versions before 1.62 for Perl have a use-after-free when registered callbacks extend the Perl argument stack, which may enable …

CVE-2026-58592 8.3

Ladybird contains a dangling-reference memory-safety flaw in its WebAssembly ESM-integration module loader. When a JavaScript function is imported into a …