CVE-2026-53178: linux Integer Underflow (Wrap or Wraparound)
CVSS: 8.1v3.1HighModified
AliasesUBUNTU-CVE-2026-53178DEBIAN-CVE-2026-53178CGA-26qm-gww7-5wwcCGA-27pm-cfgw-h3cfCGA-2fhg-cxfr-r4m6CGA-2r92-qgch-27x9CGA-2vmj-76cv-mgj5CGA-3ppx-m8p4-p3vcCGA-43qf-2c9f-v23wCGA-5m22-45jc-8g28CGA-62fx-7r29-g3ccCGA-6734-hg89-mj97CGA-6chq-qjvw-chqcCGA-8mjj-7jhg-35m8CGA-9829-8687-4hwqCGA-9gx2-429j-rw42CGA-9x82-h6p5-888vCGA-cmxp-3r3m-fj45CGA-cvv6-ggxc-v6m7CGA-f7vp-h5fg-h3wrCGA-g4pg-p8vq-3wjwCGA-g55f-cc37-w6p2CGA-h6w9-rgp8-vjgvCGA-j76q-6v7r-j434CGA-pw4j-5pwm-jx63CGA-wqr9-59xx-7c6qCGA-rc97-28xp-99jhCGA-vhqg-67vr-9w62CGA-vqgm-7hr6-9qr5CGA-w66j-mr23-6j89CGA-w82r-hwwr-vjcrCGA-wfgj-gg9w-m5m5CGA-x467-844h-wmrpCGA-45qp-fmcr-g37pCGA-49mg-gf3f-xmg8CGA-rc4q-g7hm-9rm2CGA-32cj-jwh4-8296CGA-6jch-p6fc-cmjhCGA-6ppj-hh49-39p5CGA-f89w-gjvg-mwrwCGA-xg8w-3qv8-hcpf
Published 25-06-2026Last modified 14-09-2026
Vulnerability summary
CVE-2026-53178 is a high (CVSS 8.1) Integer Underflow (Wrap or Wraparound) vulnerability in linux. EPSS estimates a 0.22% chance of exploitation in the next 30 days, higher than 12.2% of scored vulnerabilities.
CVSS score
8.1/10
010
High · v3.1 (CVE.org)EPSS score
0.22%
0%100%
Low · -0.12 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 23 · Related 24OPENSUSE-SU-2026:21388-1SUSE-SU-2026:22742-1SUSE-SU-2026:22769-1SUSE-SU-2026:22809-1SUSE-SU-2026:22810-1SUSE-SU-2026:22812-1SUSE-SU-2026:22835-1SUSE-SU-2026:22903-1SUSE-SU-2026:22904-1SUSE-SU-2026:3130-1SUSE-SU-2026:3156-1SUSE-SU-2026:3166-1USN-8726-1USN-8726-2USN-8726-3USN-8726-4USN-8727-1USN-8728-1USN-8728-2USN-8728-3USN-8760-1USN-8760-2USN-8800-1CGA-6HJM-C5Q5-H635
Timeline
- 25-06-2026PublishedVulnerability first disclosed.
- 14-09-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: rtw_mlme: add bounds checks before ie_length subtraction Add guards to ensure ie_length is large enough before subtracting fixed IE offsets to prevent unsigned integer underflow.
CVSS metrics
6 scores · 5 sources · 2 versionsHigh 7.1Preferred score · OSV · Ubuntu (Ecosystem advisory) · calculated from vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:NSourcesSingle source
High 8.1Preferred score · CVE.org (CNA)
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:HSourcesAll 5 agree
- OSV · UbuntuEcosystem advisory · calculated8.1HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
- OSV · DebianEcosystem advisory · calculated8.1HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
- OSV · ChainguardEcosystem advisory · calculated8.1HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
- NVDNIST8.1HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
EPSS trend
Probability
0.22%
Chance of exploitation in the next 30 days
Percentile
12%
Versus all other CVEs
30-day change
-0.12 pp
From 0.34% on 19-09-2026
19-09-202619-10-2026
EPSS score0.22%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu157 products
- linuxAll versions (No fix recorded) | < 7.0.0-31.31
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded) | < 7.0.0-1012.12
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Chainguard25 products
- linux-aws-6.12All versions (No fix recorded)
- linux-aws-6.18All versions (No fix recorded)
- linux-azure-6.12All versions (No fix recorded)
- linux-azure-6.18All versions (No fix recorded)
- linux-desktop-6.18All versions (No fix recorded)
Linux2 products
- linux≥ d3fcee1b78a533c256077f1300dd236801397cf7, < 637e0ea73f690028796ee2fc72a2ac4ec32968c6 | ≥ d3fcee1b78a533c256077f1300dd236801397cf7, < 542d65a6dbd9733baab96313c9fe76a76e93f484 | ≥ d3fcee1b78a533c256077f1300dd236801397cf7, < 88e994c57a79f62d5338231d8d37ee8dd98baffe | 5.15
- linux_kernel≥ 5.15, < 7.0.13 | 7.1:rc1 | 7.1:rc2 | 7.1:rc3 | 7.1:rc4 | 7.1:rc5 | 7.1:rc6 | 7.1:rc7
Debian1 product
- linuxAll versions (No fix recorded) | < 7.0.13-1
4 vendors · 185 products
