SECURELYN
Free ScanFree consultation

CVE-2026-53362

In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation path In __ip6_append_data(), when the paged-allocation branch is taken (MSG_MORE / NETIF_F_SG / large fraglen), alloclen and pagedlen are computed as alloclen = fragheaderlen + transhdrlen; pagedlen = datalen - transhdrlen; datalen already includes fraggap (datalen = length + fraggap). When fraggap is non-zero, this is not the first skb and transhdrlen is zero. The fraggap bytes carried over from the previous skb are copied just past the fragment headers in the new skb's linea…

Scores

7.8
CVSS 7.8 out of 10, high severity.
0.7%
EPSS 0.7% chance of exploitation in the next 30 days.

The facts

Published
4 July 2026
Last changed
15 October 2026
NVD status
Analyzed
Severity
High, CVSS 7.8 out of 10 (version 3.1)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
Affects
  • linux linux kernel
  • siemens simatic s7-1500 tm mfp firmware
Known exploited
Yes. CISA added it to the Known Exploited Vulnerabilities catalogue on 27 August 2026.
EPSS
0.7% chance of exploitation activity in the next 30 days (percentile 53).

Is there a Securelyn advisory?

Not yet. Securelyn writes plain-English advisories for the flaws that matter most to businesses. Subscribe to the digest to hear about them.

References