{"schema":"threatline.record/2","record":{"id":"CVE-2026-53266","aliases":[],"summary":"Linux Kernel Out-of-Bounds Write Vulnerability","details":"Linux Kernel contains an out-of-bounds write vulnerability in the ebtables SNAT target which allows an ARP sender hardware address rewrite to write directly into a nonlinear socket-buffer fragment backed by a splice-imported file page. The impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version.","categories":["Operating systems"],"product":"Kernel","vendor":"Linux","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-53266","source_modified_at":"2026-09-19T03:56:22.274Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"Linux","vendor":"Linux","versions":[{"lessThan":"bf84ad7c7a9ede46e31afaa41a1ba06a159e8c87","status":"affected","version":"63137bc5882a1882c553d389fdeeeace86ee1741","versionType":"git"},{"lessThan":"76280b78cc9f23bdc6438e10ad6dff148ef8375b","status":"affected","version":"63137bc5882a1882c553d389fdeeeace86ee1741","versionType":"git"},{"lessThan":"b7e91939ba9be805a62a257fa4e227dffbb88fa0","status":"affected","version":"63137bc5882a1882c553d389fdeeeace86ee1741","versionType":"git"},{"lessThan":"afd64b59c3de9bbbdd3759e834fdc55cda716e0b","status":"affected","version":"63137bc5882a1882c553d389fdeeeace86ee1741","versionType":"git"},{"lessThan":"153ea96c806aea395daba907a4f88480b6ad5093","status":"affected","version":"63137bc5882a1882c553d389fdeeeace86ee1741","versionType":"git"},{"lessThan":"b18675263db1147c8e1cab625400c13a0d87bd2d","status":"affected","version":"63137bc5882a1882c553d389fdeeeace86ee1741","versionType":"git"},{"lessThan":"c9b5ff59feffb92a147a84a5aa28acd2cb8ff4c5","status":"affected","version":"63137bc5882a1882c553d389fdeeeace86ee1741","versionType":"git"},{"lessThan":"67ba971ae02514d85818fe0c32549ab4bfa3bf49","status":"affected","version":"63137bc5882a1882c553d389fdeeeace86ee1741","versionType":"git"},{"status":"affected","version":"2f3839075a5f8dcf116c1abe35b36b018ac62445","versionType":"git"},{"status":"affected","version":"51ba2945a8ef65ae437c8f9ba05f0343aa82ae5b","versionType":"git"},{"status":"affected","version":"b7d23c2c87584eb429f115c078ed511be8b18e29","versionType":"git"},{"lessThan":"5.5","status":"affected","version":"5.4.73","versionType":"semver"},{"lessThan":"5.9","status":"affected","version":"5.8.17","versionType":"semver"},{"lessThan":"5.10","status":"affected","version":"5.9.2","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-53266","source_modified_at":"2026-09-19T03:56:22.274Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"Linux","vendor":"Linux","versions":[{"status":"affected","version":"5.10"},{"lessThan":"5.10","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.259","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.210","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.176","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.143","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.94","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.36","versionType":"semver"},{"lessThanOrEqual":"7.0.*","status":"unaffected","version":"7.0.13","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.1","versionType":"original_commit_for_fix"}],"defaultStatus":"affected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-53266","source_modified_at":"2026-09-19T03:56:22.274Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"Linux","ecosystem":null},"version":"76280b78cc9f23bdc6438e10ad6dff148ef8375b","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-53266","source_modified_at":"2026-09-19T03:56:22.274Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"Linux","ecosystem":null},"version":"153ea96c806aea395daba907a4f88480b6ad5093","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-53266","source_modified_at":"2026-09-19T03:56:22.274Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"Linux","ecosystem":null},"version":"67ba971ae02514d85818fe0c32549ab4bfa3bf49","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-53266","source_modified_at":"2026-09-19T03:56:22.274Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"Linux","ecosystem":null},"version":"5.5","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-53266","source_modified_at":"2026-09-19T03:56:22.274Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"Linux","ecosystem":null},"version":"5.9","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-53266","source_modified_at":"2026-09-19T03:56:22.274Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"Linux","ecosystem":null},"version":"5.10","basis":"first unaffected version stated in the CVE record"}],"cvss":8.8,"severity":"High","kev":{"listed":true,"date_added":"2026-09-18","due_date":"2026-09-21","required_action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","ransomware_campaign_use":"Unknown","forensic_triage":true},"epss":{"probability":0.00827,"percentile":0.57056,"score_date":"2026-10-23"},"published_at":"2026-06-25T08:39:53.190Z","modified_at":"2026-09-19T03:56:22.274Z","provenance":[{"source":"CISA KEV","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23T17:00:09.9001Z"},{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-53266","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-09-19T03:56:22.274Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-53266","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CISA KEV","CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://git.kernel.org/stable/c/bf84ad7c7a9ede46e31afaa41a1ba06a159e8c87"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/76280b78cc9f23bdc6438e10ad6dff148ef8375b"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/b7e91939ba9be805a62a257fa4e227dffbb88fa0"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/afd64b59c3de9bbbdd3759e834fdc55cda716e0b"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/153ea96c806aea395daba907a4f88480b6ad5093"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/b18675263db1147c8e1cab625400c13a0d87bd2d"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/c9b5ff59feffb92a147a84a5aa28acd2cb8ff4c5"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/67ba971ae02514d85818fe0c32549ab4bfa3bf49"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53266","source":"CISA KEV"},{"source":"CVE List","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-53266","tags":["government-resource"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"active","automatable":"no","technical_impact":"total","assessed_at":"2026-09-18T00:00:00+00:00"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"vendor and product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-09-19T03:56:22.274Z","content_hash":"9c9e0e924f3db0facf1b40abc28336c01c09e0241a43ec3d32db38155e3dc493"}}