9.8

CVE-2026-53398: linux Improper Initialization

CVSS: 9.8v3.1CriticalModified
AliasesUBUNTU-CVE-2026-53398DEBIAN-CVE-2026-53398
Published 19-07-2026Last modified 19-10-2026
Open JSON

Vulnerability summary

CVE-2026-53398 is a critical (CVSS 9.8) Improper Initialization vulnerability in linux. EPSS estimates a 0.54% chance of exploitation in the next 30 days, higher than 44.4% of scored vulnerabilities.

Overall risk
70/100
0100
High · default modelHow is this calculated?
CVSS score
9.8/10
010
Critical · v3.1 (CVE.org)
EPSS score
0.54%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 40 · Related 37
MGASA-2026-0312OPENSUSE-SU-2026:11339-1OPENSUSE-SU-2026:21555-1RHSA-2026:77689RHSA-2026:77690SUSE-SU-2026:23066-1

Timeline

  1. 19-07-2026
    PublishedVulnerability first disclosed.
  2. 19-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix SECINFO_NO_NAME decode error cleanup nfsd4_decode_secinfo_no_name() currently initializes sin_exp after decoding sin_style. If the XDR stream is truncated, the decoder returns nfserr_bad_xdr before sin_exp is initialized. Since commit 3fdc54646234 ("NFSD: Reduce amount of struct nfsd4_compoundargs that needs clearing"), the inline iops array is not cleared between RPC calls. A failed SECINFO_NO_NAME decode can therefore leave sin_exp holding stale union contents from a previous operation. The error response path still invokes nfsd4_secinfo_no_name_release(), which calls exp_put() on a non-NULL sin_exp. Initialize sin_exp before the first failable decode step, matching nfsd4_decode_secinfo().

CVSS metrics

5 scores · 4 sources · 2 versions

EPSS trend

Probability

0.54%

Chance of exploitation in the next 30 days

Percentile

44%

Versus all other CVEs

30-day change

0.00 pp

From 0.54% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.54%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu157 products
  • linuxAll versions (No fix recorded) | < 5.15.0-194.204 | < 6.8.0-147.147 | < 7.0.0-31.31
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.15.0-1116.123 | < 6.8.0-1067.70 | < 7.0.0-1012.12
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ 5e76b25d7cc82c148d391c0c43b884e6427cb302, < 8836405abdc53ca3dd5fc68b2cf6f8f012fad011 | ≥ 07b68ff5c71cf4ed5443016d8eb116863c0a4d88, < 49de5d31dd8fdebf78bdeaf196b0ca5cd5c75439 | ≥ 3fdc546462348b8a497c72bc894e0cde9f10fc40, < 5ec37edcb534f3fc92304be236d37f08e6545585 | ≥ 3fdc546462348b8a497c72bc894e0cde9f10fc40, < 1e04be34cafae119e82bcaccd6d28a20f72a3647 | ≥ 3fdc546462348b8a497c72bc894e0cde9f10fc40, < 161d1aaeb04d620d3692639700512bb5038c1e10 | ≥ 3fdc546462348b8a497c72bc894e0cde9f10fc40, < c8a24effd96d4779e2ad779654682304491c55a5 | ≥ 3fdc546462348b8a497c72bc894e0cde9f10fc40, < 46eb17d45be69d28c7a23ea03283b207426a8232 | ≥ 3fdc546462348b8a497c72bc894e0cde9f10fc40, < 9e18e83b8846a5c3fe13fc8a464b4865d33996c6 | ≥ 5.10.220, < 5.10.260 | ≥ 5.15.154, < 5.15.211 | 6.1
  • linux_kernel≥ 5.10.220, < 5.10.260 | ≥ 5.15.154, < 5.15.211 | ≥ 6.1, < 6.1.177 | ≥ 6.2, < 6.6.144 | ≥ 6.7, < 6.12.95 | ≥ 6.13, < 6.18.38 | ≥ 6.19, < 7.1.3
Debian1 product
  • linux< 6.1.177-1 | < 6.12.95-1 | < 7.1.3-1

3 vendors · 160 products

References

37 links
Show all 37 references