9.8

CVE-2026-53088: linux Off-by-one Error

CVSS: 9.8v3.1CriticalModified
AliasesUBUNTU-CVE-2026-53088DEBIAN-CVE-2026-53088
Published 24-06-2026Last modified 19-10-2026
Open JSON

Vulnerability summary

CVE-2026-53088 is a critical (CVSS 9.8) Off-by-one Error vulnerability in linux. EPSS estimates a 0.40% chance of exploitation in the next 30 days, higher than 32.6% of scored vulnerabilities.

Overall risk
70/100
0100
High · default modelHow is this calculated?
CVSS score
9.8/10
010
Critical · v3.1 (CVE.org)
EPSS score
0.40%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 61 · Related 61
OPENSUSE-SU-2026:21555-1SUSE-SU-2026:23066-1SUSE-SU-2026:23068-1SUSE-SU-2026:23193-1SUSE-SU-2026:23194-1SUSE-SU-2026:23221-1

Timeline

  1. 24-06-2026
    PublishedVulnerability first disclosed.
  2. 19-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: fix off-by-one in bcmgenet_put_txcb The write_ptr points to the next open tx_cb. We want to return the tx_cb that gets rewinded, so we must rewind the pointer first then return the tx_cb that it points to. That way the txcb can be correctly cleaned up.

CVSS metrics

5 scores · 4 sources · 2 versions

EPSS trend

Probability

0.40%

Chance of exploitation in the next 30 days

Percentile

33%

Versus all other CVEs

30-day change

0.00 pp

From 0.40% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.40%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu165 products
  • linux< 4.15.0-254.266 | < 5.4.0-234.254 | < 5.15.0-186.196 | < 6.8.0-136.136 | All versions (No fix recorded) | < 7.0.0-28.28
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 4.15.0-1195.208 | < 5.4.0-1162.173 | < 5.15.0-1112.119 | < 6.8.0-1061.64 | All versions (No fix recorded) | < 7.0.0-1009.9
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ 876dbadd53a7102e2a84afc84ea2bd3ee6dc5636, < 14e9f86564fff7bcf7f45c1b69080e837b31d185 | ≥ 876dbadd53a7102e2a84afc84ea2bd3ee6dc5636, < fb9a3c1f547d0ff024dbfe7b6f327626ddf0a3de | ≥ 876dbadd53a7102e2a84afc84ea2bd3ee6dc5636, < 85f34ec320d3881badfd4edc5fee5cd5012bb54d | ≥ 876dbadd53a7102e2a84afc84ea2bd3ee6dc5636, < 2a74590170427a3ca7cc4bb8690cdd559129c29c | ≥ 876dbadd53a7102e2a84afc84ea2bd3ee6dc5636, < 29394f722f620281f2ee9a47f947734e53d72c90 | ≥ 876dbadd53a7102e2a84afc84ea2bd3ee6dc5636, < 4cab761fc51c65aef741fcece4a18f3554edbc09 | ≥ 876dbadd53a7102e2a84afc84ea2bd3ee6dc5636, < 72df896e31ddd06fcc5a789f025ad7a62a18bc9b | ≥ 876dbadd53a7102e2a84afc84ea2bd3ee6dc5636, < 57f3f53d2c9c5a9e133596e2f7bc1c50688a6d38 | 3bdf77194ea822390b405639b77659071fd2c2e9 | ≥ 3.16.50, < 3.17 | 4.13
  • linux_kernel≥ 3.16.50, < 3.17 | ≥ 4.13.1, < 5.10.258 | ≥ 5.11, < 5.15.209 | ≥ 5.16, < 6.1.175 | ≥ 6.2, < 6.6.141 | ≥ 6.7, < 6.12.91 | ≥ 6.13, < 6.18.33 | ≥ 6.19, < 7.0.10 | 4.13 | 4.13:rc2 | 4.13:rc3 | 4.13:rc4 | 4.13:rc5 | 4.13:rc6 | 4.13:rc7
Debian1 product
  • linux< 6.1.176-1 | < 6.12.94-1 | < 7.0.10-1

3 vendors · 168 products

References

62 links
Show all 62 references