5.5

CVE-2026-53269: linux

CVSS: 5.5v3.1MediumModified
AliasesUBUNTU-CVE-2026-53269DEBIAN-CVE-2026-53269CGA-522x-v2cr-6rqx
Published 25-06-2026Last modified 15-10-2026
Open JSON

Vulnerability summary

CVE-2026-53269 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.12% chance of exploitation in the next 30 days, higher than 1.6% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.12%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 36 · Related 36
MGASA-2026-0312OPENSUSE-SU-2026:21910-1SUSE-SU-2026:23477-1SUSE-SU-2026:23481-1SUSE-SU-2026:23528-1SUSE-SU-2026:23529-1

Timeline

  1. 25-06-2026
    PublishedVulnerability first disclosed.
  2. 15-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: synproxy: add mutex to guard hook reference counting As the synproxy infrastructure register netfilter hooks on-demand when a user adds the first iptables target or nftables expression, if done concurrently they can race each other. Introduce a mutex to serialize the refcount control blocks access from both frontends. While a per namespace mutex might be more efficient, it is not needed for target/expression like SYNPROXY.

CVSS metrics

4 scores · 3 sources · 2 versions

EPSS trend

Probability

0.12%

Chance of exploitation in the next 30 days

Percentile

2%

Versus all other CVEs

30-day change

0.00 pp

From 0.12% on 20-09-2026

20-09-202620-10-2026
EPSS score
0.12%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu164 products
  • linuxAll versions (No fix recorded) | < 5.15.0-198.208 | < 6.8.0-146.146 | < 7.0.0-31.31
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.15.0-1117.124 | < 6.8.0-1066.69 | < 7.0.0-1012.12
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Chainguard6 products
  • linux-azure-6.18< 6.18.38-r0
  • linux-gcp-6.18< 6.18.38-r0
  • linux-gcp-6.18-bootc-boot-installed< 6.18.38-r0
  • linux-qemu-6.18< 6.18.38-r0
  • linux-qemu-6.18-bootc-boot-installed< 6.18.38-r0
Linux2 products
  • linux≥ ad49d86e07a497e834cb06f2b151dccd75f8e148, < 0ec9ddc1bda261a2c57636c74c8b4e53000102c9 | ≥ ad49d86e07a497e834cb06f2b151dccd75f8e148, < 56ffbe3a08c01dcdb0d6adee9ce1e535bfb3b389 | ≥ ad49d86e07a497e834cb06f2b151dccd75f8e148, < debc57b83d5b323df74bf010c8d50fe26ad2ed6b | ≥ ad49d86e07a497e834cb06f2b151dccd75f8e148, < 0f8ba5e4c53d2e4a536aa68140beda9fe59b2f88 | ≥ ad49d86e07a497e834cb06f2b151dccd75f8e148, < 640441348258220e78daed40528b85b8afcedab6 | ≥ ad49d86e07a497e834cb06f2b151dccd75f8e148, < aaf80701dc2f7a48fe543961e21f8ca3924d587c | ≥ ad49d86e07a497e834cb06f2b151dccd75f8e148, < fbf0591275f50eae5733c3d7a8cd6c1e79933ffa | ≥ ad49d86e07a497e834cb06f2b151dccd75f8e148, < 2fcba19caaeb2a33017459d3430f057967bb91b6 | 5.3
  • linux_kernel≥ 5.3, < 5.10.259 | ≥ 5.11, < 5.15.210 | ≥ 5.16, < 6.1.176 | ≥ 6.2, < 6.6.143 | ≥ 6.7, < 6.12.94 | ≥ 6.13, < 6.18.36 | ≥ 6.19, < 7.0.13 | 7.1:rc1 | 7.1:rc2 | 7.1:rc3 | 7.1:rc4 | 7.1:rc5 | 7.1:rc6
Debian1 product
  • linux< 6.1.176-1 | < 6.12.94-1 | < 7.0.13-1

4 vendors · 173 products

References

40 links
Show all 40 references