What is CVE-2026-53216?

CVE-2026-53216 is a Critical severity Linux kernel vulnerability with a CVSS score of 9.8 out of 10, affecting Linux kernel versions from 5.9 onward and patched in 5.15.210, 6.1.176, 6.6.143 and others. CVE-2026-53216 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2026-53216?

CVE-2026-53216 has a CVSS score of 9.8 out of 10, rated Critical severity. The vector string is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Is there a patch available for CVE-2026-53216?

Yes, CVE-2026-53216 has been patched. Fixed versions include 5.15.210, 6.1.176, 6.6.143 and others. If you are running Linux kernel 5.9 or later up to the fix versions, apply the relevant patch for your kernel branch.

Is CVE-2026-53216 actively exploited?

CVE-2026-53216 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2026-53216

Critical

In the Linux kernel, the following vulnerability has been resolved: net: mvpp2: limit XDP frame size to the RX buffer mvpp2 has short and long BM pools, and short pool buffers can be smaller than PAGE_SIZE. The XDP path nevertheless initializes every xdp_buff with PAGE_SIZE as frame size. XDP helpers use frame_sz to validate tail growth and to derive the hard end of the data area. Advertising PAGE_SIZE for short buffers can let bpf_xdp_adjust_tail() grow a packet past the real allocation, corrupting memory or later tripping skb tailroom checks. Initialize the XDP buffer with bm_pool->frag_size so XDP tailroom matches the actual buffer backing the packet.

Package Linux Kernel

Published 2026-06-25

Last modified 2026-07-02

CVSS version 3.1

Patch available

Yes

CVSS 3.1 score

9.8

out of 10

Critical

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Vector string

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected versions

Linux kernel versions 5.9 and later are affected. Fixed in 5.15.210, 6.1.176, 6.6.143, 6.12.94, 6.18.36, 7.0.13, 7.1 and their respective stable series.

Affected from

≥ 5.9

Fixed in

✓ 5.15.210 5.15.x ✓ 6.1.176 6.1.x ✓ 6.6.143 6.6.x ✓ 6.12.94 6.12.x ✓ 6.18.36 6.18.x ✓ 7.0.13 7.0.x ✓ 7.1

References

7 total

Kernel Git
https://git.kernel.org/stable/c/3b8b0c3631b19faee53f0d15a49924129b063eec

Patch
Kernel Git
https://git.kernel.org/stable/c/910617a4e67dbdd5fdb39d9dc6a51e491e1b2c3e

Patch
Kernel Git
https://git.kernel.org/stable/c/9545cc5ef18ca22d031f2f47c157192460652359

Patch
Kernel Git
https://git.kernel.org/stable/c/994bd2b58d2bd08aa97ec0836cc813cfcb00d749

Patch
Kernel Git
https://git.kernel.org/stable/c/a3ee9231ccec6ec3be2de89c56f897055fd9eab1

Patch

Showing 5 of 7 references View all on NVD

Details

CVE ID CVE-2026-53216

Severity Critical

CVSS score 9.8 / 10

CVSS version 3.1

Published 2026-06-25

Modified 2026-07-02

KEV No

Patch

Yes

Package linux

Frequently asked questions

What is CVE-2026-53216?

CVE-2026-53216 is a Critical severity Linux kernel vulnerability with a CVSS score of 9.8 out of 10 . It affects Linux kernel versions from 5.9 onward and has been patched in 5.15.210, 6.1.176, 6.6.143 and others. CVE-2026-53216 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
What is the CVSS score for CVE-2026-53216?

CVE-2026-53216 has a CVSS score of 9.8 out of 10, rated Critical severity (CVSS 3.1). The vector string is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Is there a patch available for CVE-2026-53216?

Yes. CVE-2026-53216 has been patched. Fixed versions include 5.15.210, 6.1.176, 6.6.143 and others. If you are running Linux kernel 5.9 or later up to the fix versions, apply the relevant patch for your kernel branch.
Is CVE-2026-53216 actively exploited?

No. CVE-2026-53216 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.