What is CVE-2026-53232?

CVE-2026-53232 is a High severity Linux kernel vulnerability with a CVSS score of 8.8 out of 10, affecting Linux kernel versions from 5.5 onward and patched in 6.6.143, 6.12.94, 6.18.36 and others. CVE-2026-53232 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2026-53232?

CVE-2026-53232 has a CVSS score of 8.8 out of 10, rated High severity. The vector string is CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Is there a patch available for CVE-2026-53232?

Yes, CVE-2026-53232 has been patched. Fixed versions include 6.6.143, 6.12.94, 6.18.36 and others. If you are running Linux kernel 5.5 or later up to the fix versions, apply the relevant patch for your kernel branch.

Is CVE-2026-53232 actively exploited?

CVE-2026-53232 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2026-53232

High

In the Linux kernel, the following vulnerability has been resolved: net: phy: clean the sfp upstream if phy probing fails Sashiko reported that we don't call sfp_bus_del_upstream() in the probe failure path, so let's add it, otherwise the sfp-bus is left with a dangling 'upstream' field, that may be used later on during SFP events. This issue existed before the generic phylib sfp support, back when drivers were calling phy_sfp_probe themselves.

Package Linux Kernel

Published 2026-06-25

Last modified 2026-07-16

CVSS version 3.1

Patch available

Yes

CVSS 3.1 score

8.8

out of 10

High

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Vector string

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected versions

Linux kernel versions 5.5 and later are affected. Fixed in 6.6.143, 6.12.94, 6.18.36, 7.0.13, 7.1 and their respective stable series.

Affected from

≥ 5.5

Fixed in

✓ 6.6.143 6.6.x ✓ 6.12.94 6.12.x ✓ 6.18.36 6.18.x ✓ 7.0.13 7.0.x ✓ 7.1

References

5 total

Kernel Git
https://git.kernel.org/stable/c/48774e87bbaa0056819d4b52301e4692e50e3252

Patch
Kernel Git
https://git.kernel.org/stable/c/0b27701ce93161d7bbf4b25fa20ca59963b0e20c
Kernel Git
https://git.kernel.org/stable/c/12fb84dc4dc8eb47ebe2b27f7de6255a4a205e1b
Kernel Git
https://git.kernel.org/stable/c/3a254779c169954fe23328a1db51f67be374f913
Kernel Git
https://git.kernel.org/stable/c/9326b654f90a09eadeb796c82801a5609d57f0c8

Details

CVE ID CVE-2026-53232

Severity High

CVSS score 8.8 / 10

CVSS version 3.1

Published 2026-06-25

Modified 2026-07-16

KEV No

Patch

Yes

Package linux

Frequently asked questions

What is CVE-2026-53232?

CVE-2026-53232 is a High severity Linux kernel vulnerability with a CVSS score of 8.8 out of 10 . It affects Linux kernel versions from 5.5 onward and has been patched in 6.6.143, 6.12.94, 6.18.36 and others. CVE-2026-53232 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
What is the CVSS score for CVE-2026-53232?

CVE-2026-53232 has a CVSS score of 8.8 out of 10, rated High severity (CVSS 3.1). The vector string is CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Is there a patch available for CVE-2026-53232?

Yes. CVE-2026-53232 has been patched. Fixed versions include 6.6.143, 6.12.94, 6.18.36 and others. If you are running Linux kernel 5.5 or later up to the fix versions, apply the relevant patch for your kernel branch.
Is CVE-2026-53232 actively exploited?

No. CVE-2026-53232 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.