What is CVE-2026-53001?

CVE-2026-53001 is a Medium severity Linux kernel vulnerability with a CVSS score of 5.5 out of 10, affecting Linux kernel versions from 2.6.28 onward and patched in 5.10.258, 5.15.209, 6.1.175 and others. CVE-2026-53001 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2026-53001?

CVE-2026-53001 has a CVSS score of 5.5 out of 10, rated Medium severity. The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Is there a patch available for CVE-2026-53001?

Yes, CVE-2026-53001 has been patched. Fixed versions include 5.10.258, 5.15.209, 6.1.175 and others. If you are running Linux kernel 2.6.28 or later up to the fix versions, apply the relevant patch for your kernel branch.

Is CVE-2026-53001 actively exploited?

CVE-2026-53001 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2026-53001

Medium

In the Linux kernel, the following vulnerability has been resolved: netfilter: xtables: restrict several matches to inet family This is a partial revert of: commit ab4f21e6fb1c ("netfilter: xtables: use NFPROTO_UNSPEC in more extensions") to allow ipv4 and ipv6 only. - xt_mac - xt_owner - xt_physdev These extensions are not used by ebtables in userspace. Moreover, xt_realm is only for ipv4, since dst->tclassid is ipv4 specific.

Package Linux Kernel

Published 2026-06-24

Last modified 2026-07-14

CVSS version 3.1

Patch available

Yes

CVSS 3.1 score

5.5

out of 10

Medium

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

High

Vector string

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected versions

Linux kernel versions 2.6.28 and later are affected. Fixed in 5.10.258, 5.15.209, 6.1.175, 6.6.141, 6.12.91, 6.18.33, 7.0.10, 7.1 and their respective stable series.

Affected from

≥ 2.6.28

Fixed in

✓ 5.10.258 5.10.x ✓ 5.15.209 5.15.x ✓ 6.1.175 6.1.x ✓ 6.6.141 6.6.x ✓ 6.12.91 6.12.x ✓ 6.18.33 6.18.x ✓ 7.0.10 7.0.x ✓ 7.1

References

8 total

Kernel Git
https://git.kernel.org/stable/c/14203f9edf944b3fb63faadd62f38452421ecdfc

Patch
Kernel Git
https://git.kernel.org/stable/c/689a91ff18d6448d94c1ab7c076fecdb2b668bef

Patch
Kernel Git
https://git.kernel.org/stable/c/76160e04440c9698b989dbd9492a7ec4f520c9ee

Patch
Kernel Git
https://git.kernel.org/stable/c/7eaf9c740f33230cb224dc265f3c69f8531ff57b

Patch
Kernel Git
https://git.kernel.org/stable/c/9a109751b297b0f2135495749ef5a18ba31ec7d4

Patch

Showing 5 of 8 references View all on NVD

Details

CVE ID CVE-2026-53001

Severity Medium

CVSS score 5.5 / 10

CVSS version 3.1

Published 2026-06-24

Modified 2026-07-14

KEV No

Patch

Yes

Package linux

Frequently asked questions

What is CVE-2026-53001?

CVE-2026-53001 is a Medium severity Linux kernel vulnerability with a CVSS score of 5.5 out of 10 . It affects Linux kernel versions from 2.6.28 onward and has been patched in 5.10.258, 5.15.209, 6.1.175 and others. CVE-2026-53001 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
What is the CVSS score for CVE-2026-53001?

CVE-2026-53001 has a CVSS score of 5.5 out of 10, rated Medium severity (CVSS 3.1). The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.
Is there a patch available for CVE-2026-53001?

Yes. CVE-2026-53001 has been patched. Fixed versions include 5.10.258, 5.15.209, 6.1.175 and others. If you are running Linux kernel 2.6.28 or later up to the fix versions, apply the relevant patch for your kernel branch.
Is CVE-2026-53001 actively exploited?

No. CVE-2026-53001 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.