8.6

CVE-2026-53217: linux Incorrect Calculation

CVSS: 8.6v3.1HighModified
AliasesUBUNTU-CVE-2026-53217DEBIAN-CVE-2026-53217CGA-2hpx-hqjf-8j58
Published 25-06-2026Last modified 19-10-2026
Open JSON

Vulnerability summary

CVE-2026-53217 is a high (CVSS 8.6) Incorrect Calculation vulnerability in linux. EPSS estimates a 0.38% chance of exploitation in the next 30 days, higher than 31% of scored vulnerabilities.

Overall risk
34/100
0100
Medium · default modelHow is this calculated?
CVSS score
8.6/10
010
High · v3.1 (CVE.org)
EPSS score
0.38%
0%100%
Low · -0.14 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 36 · Related 36
MGASA-2026-0312OPENSUSE-SU-2026:21388-1SUSE-SU-2026:22742-1SUSE-SU-2026:22769-1SUSE-SU-2026:22809-1SUSE-SU-2026:22810-1

Timeline

  1. 25-06-2026
    PublishedVulnerability first disclosed.
  2. 19-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: net: mvpp2: sync RX data at the hardware packet offset mvpp2 programs the RX queue packet offset, so hardware writes received data at dma_addr + MVPP2_SKB_HEADROOM. The current CPU sync starts at dma_addr and only covers rx_bytes + MVPP2_MH_SIZE bytes, which syncs the unused headroom and misses the same number of bytes at the packet tail. On non-coherent DMA systems this can leave the CPU reading stale cache contents for the end of the received frame. Use dma_sync_single_range_for_cpu() with MVPP2_SKB_HEADROOM as the range offset so the sync covers the Marvell header and packet data actually written by hardware.

CVSS metrics

6 scores · 5 sources · 2 versions

EPSS trend

Probability

0.38%

Chance of exploitation in the next 30 days

Percentile

31%

Versus all other CVEs

30-day change

-0.14 pp

From 0.52% on 20-09-2026

20-09-202620-10-2026
EPSS score
0.38%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu156 products
  • linux< 5.15.0-198.208 | < 6.8.0-146.146 | All versions (No fix recorded) | < 7.0.0-31.31
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 5.15.0-1117.124 | < 6.8.0-1066.69 | All versions (No fix recorded) | < 7.0.0-1012.12
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Chainguard13 products
  • linux-aws-6.12< 6.12.95-r0
  • linux-aws-6.18< 6.18.38-r0
  • linux-azure-6.12< 6.12.95-r0
  • linux-azure-6.18< 6.18.38-r0
  • linux-gcp-6.12< 6.12.95-r0
Linux2 products
  • linux≥ e1921168bbd4810de4197446e52f652cd0dd9541, < 60412bdd1b2576659eac23a23d2d9ff96228a643 | ≥ e1921168bbd4810de4197446e52f652cd0dd9541, < 19f8bc139e9b149d1e5bf75ae761d1bb8dd3e7d8 | ≥ e1921168bbd4810de4197446e52f652cd0dd9541, < a3ad9b5767c89531fc7dae951b51b0933dcf7051 | ≥ e1921168bbd4810de4197446e52f652cd0dd9541, < bede0f481b9137d73d1cf64309cbe4b94818a5d6 | ≥ e1921168bbd4810de4197446e52f652cd0dd9541, < 23548007b3c66d628fc7d6b80d1e23be04ea10d9 | ≥ e1921168bbd4810de4197446e52f652cd0dd9541, < a13199fa224e9f776f4005d5037df03aa9ea8f37 | ≥ e1921168bbd4810de4197446e52f652cd0dd9541, < e302206ad84a407a7e5f3f6fe767ff5efaace689 | ≥ e1921168bbd4810de4197446e52f652cd0dd9541, < 180235600934bef6add3be637c296d6cf3272e67 | 5.5
  • linux_kernel≥ 5.5, < 5.10.259 | ≥ 5.11, < 5.15.210 | ≥ 5.16, < 6.1.176 | ≥ 6.2, < 6.6.143 | ≥ 6.7, < 6.12.94 | ≥ 6.13, < 6.18.36 | ≥ 6.19, < 7.0.13 | 7.1:rc1 | 7.1:rc2 | 7.1:rc3 | 7.1:rc4 | 7.1:rc5 | 7.1:rc6 | 7.1:rc7
Debian1 product
  • linux< 6.1.176-1 | < 6.12.94-1 | < 7.0.13-1

4 vendors · 172 products

References

39 links
Show all 39 references