VDB
CVE-2026-53006
CVE-2026-53006
PUBLISHED
CVSS 9.8 CRITICAL
Reported by Linux · Published June 24, 2026
In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible UAF in icmpv6_rcv() Caching saddr and daddr before pskb_pull() is problematic since skb->head can change. Remove these temporary variables: - We only access &ipv6_hdr(skb)->saddr and &ipv6_hdr(skb)->daddr when net_dbg_ratelimited() is called in the slow path. - Avoid potential future misuse after pskb_pull() call.
Risk Scores
CVSS 3.1
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | 4b3418fba0fe819197e3359d5ddbef84ba2c59de, 4b3418fba0fe819197e3359d5ddbef84ba2c59de, 4b3418fba0fe819197e3359d5ddbef84ba2c59de |
| Linux | Linux | 4.4, 0, 5.10.258 |
| linux | linux_kernel | 4.4, 4.4, 4.4 |
| Red Hat | Red Hat Enterprise Linux 6 | |
| Red Hat | Red Hat Enterprise Linux 7 | |
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | 0:4.18.0-477.163.1.el8_8, 0:4.18.0-477.163.1.el8_8, 0:4.18.0-477.163.1.el8_8 |
| Red Hat | Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | 0:4.18.0-305.206.1.el8_4, 0:4.18.0-305.206.1.el8_4 |
| Red Hat | Red Hat Enterprise Linux 9 | |
| Red Hat | Red Hat Enterprise Linux 8 | 0:4.18.0-553.148.1.rt7.489.el8_10, 0:4.18.0-553.148.1.rt7.489.el8_10, 0:4.18.0-553.148.1.rt7.489.el8_10 |
| Red Hat | Red Hat Enterprise Linux 9 | 0:5.14.0-687.30.1.el9_8, 0:5.14.0-687.30.1.el9_8, 0:5.14.0-687.30.1.el9_8 |
| Red Hat | Red Hat Enterprise Linux 7 | |
| Siemens | SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP | V3.1.6, V3.1.6, V3.1.6 |
| Red Hat | Red Hat Enterprise Linux 6 | |
| Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On | 0:4.18.0-372.213.1.el8_6, 0:4.18.0-372.213.1.el8_6 |
| Red Hat | Red Hat Enterprise Linux 10 | |
| Red Hat | Red Hat Enterprise Linux 8 | |
| Red Hat | Red Hat Enterprise Linux 9 | |
| Siemens | SIPLUS S7-1500 CPU 1518-4 PN/DP MFP | V3.1.6, V3.1.6, V3.1.7 |
| Linux | Linux | 7.1, 7.1, 4b3418fba0fe819197e3359d5ddbef84ba2c59de |
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service | 0:4.18.0-477.163.1.el8_8, 0:4.18.0-477.163.1.el8_8, 0:4.18.0-477.163.1.el8_8 |
…and 9 more
Timeline
- Jun 24, 2026 CVE Published
- Jun 25, 2026 Coalition ESS Score
- Jun 26, 2026 EPSS Score
- Jul 24, 2026 Distribution Patch
- Jul 24, 2026 Security Advisory
- Jul 28, 2026 Distribution Patch
- Jul 28, 2026 Security Advisory
- Jul 28, 2026 Distribution Patch
- Jul 28, 2026 Security Advisory
- Jul 29, 2026 Distribution Patch
- Jul 29, 2026 Security Advisory
- Jul 30, 2026 Distribution Patch
References
- https://access.redhat.com/security/cve/CVE-2026-53006 vdb
- RHBZ#2492363 issue
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53006.json url
- https://access.redhat.com/errata/RHSA-2026:64767 vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:47017 vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:67723 vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:65712 vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:62568 vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:45192 vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:47011 vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:65710 vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:65711 vendor-advisory
…and 5 more