Answer in brief
CVE-2026-53151 records a Critical severity (CVSS 9.8) vulnerability in rxrpc: Fix the ACK parser to extract the SACK table for parsing. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 9.8. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=d57a3a151660902091491ac2633134e1be92557f <5d1ae4e17a3ecd8561cdb4f4f70152f41039c4e1 || >=d57a3a151660902091491ac2633134e1be92557f <775c5e89272a2615b72bb84f611ba66fa3b7493e || >=d57a3a151660902091491ac2633134e1be92557f <566c4c1244de50fbff1f89ff93c9d7b0fc256db4 || >=d57a3a151660902091491ac2633134e1be92557f <224298450be5c04d2a6ea1c2a94669d7ebf65d00 || >=d57a3a151660902091491ac2633134e1be92557f <333b6d5bb9f87827ac2639c737bf9613dbae7253 | 5d1ae4e17a3ecd8561cdb4f4f70152f41039c4e1, 775c5e89272a2615b72bb84f611ba66fa3b7493e, 566c4c1244de50fbff1f89ff93c9d7b0fc256db4, 224298450be5c04d2a6ea1c2a94669d7ebf65d00, 333b6d5bb9f87827ac2639c737bf9613dbae7253 |
| Linux/Linuxgeneric | 6.2 | Not reported |
Published upstream
Jun 25, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Jun 25, 2026
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix the ACK parser to extract the SACK table for parsing Fix modification of the received skbuff in rxrpc_input_soft_acks() and a potential incorrect access of the buffer in a fragmented UDP packet (the packet would probably have to be deliberately pre-generated as fragmented) when AF_RXRPC tries to extract the contents of the SACK table by copying out the contents of the SACK table into a buffer before attempting to parse AF_RXRPC assumes that it can just call skb_condense() and then validly access the SACK table from skb->data and that it will be a flat buffer - but skb_condense() can silently fail to do anything under some circumstances. Note that whilst rxrpc_input_soft_acks() should be able to parse extended ACKs, the rest of AF_RXRPC doesn't currently support that. Further, there's then no need to call skb_condense() in rxrpc_input_ack(), so don't.
Quoted source text, attributed separately from HOL analysis.
Answer in brief
CVE-2026-53151 records a Critical severity (CVSS 9.8) vulnerability in rxrpc: Fix the ACK parser to extract the SACK table for parsing. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 9.8. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=d57a3a151660902091491ac2633134e1be92557f <5d1ae4e17a3ecd8561cdb4f4f70152f41039c4e1 || >=d57a3a151660902091491ac2633134e1be92557f <775c5e89272a2615b72bb84f611ba66fa3b7493e || >=d57a3a151660902091491ac2633134e1be92557f <566c4c1244de50fbff1f89ff93c9d7b0fc256db4 || >=d57a3a151660902091491ac2633134e1be92557f <224298450be5c04d2a6ea1c2a94669d7ebf65d00 || >=d57a3a151660902091491ac2633134e1be92557f <333b6d5bb9f87827ac2639c737bf9613dbae7253 | 5d1ae4e17a3ecd8561cdb4f4f70152f41039c4e1, 775c5e89272a2615b72bb84f611ba66fa3b7493e, 566c4c1244de50fbff1f89ff93c9d7b0fc256db4, 224298450be5c04d2a6ea1c2a94669d7ebf65d00, 333b6d5bb9f87827ac2639c737bf9613dbae7253 |
| Linux/Linuxgeneric | 6.2 | Not reported |
Published upstream
Jun 25, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Jun 25, 2026
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix the ACK parser to extract the SACK table for parsing Fix modification of the received skbuff in rxrpc_input_soft_acks() and a potential incorrect access of the buffer in a fragmented UDP packet (the packet would probably have to be deliberately pre-generated as fragmented) when AF_RXRPC tries to extract the contents of the SACK table by copying out the contents of the SACK table into a buffer before attempting to parse AF_RXRPC assumes that it can just call skb_condense() and then validly access the SACK table from skb->data and that it will be a flat buffer - but skb_condense() can silently fail to do anything under some circumstances. Note that whilst rxrpc_input_soft_acks() should be able to parse extended ACKs, the rest of AF_RXRPC doesn't currently support that. Further, there's then no need to call skb_condense() in rxrpc_input_ack(), so don't.
Quoted source text, attributed separately from HOL analysis.