CVE-2026-53362

KEV の『悪用』には未遂(脆弱でない環境やハニーポットでの試行)が含まれ、特定の組織が侵害されたことを意味しない。

KEV の登録内容

vulnerabilityName: Linux Kernel Unspecified Vulnerability
vendorProject: Linux
product: Kernel
dateAdded: 2026-08-27
shortDescription: Linux Kernel contains an unspecified vulnerability that can allow for privilege escalation via IPv6 networking subsystem. This vulnerability can impact multiple products, including but not limited to Suse, Red Hat, and other products using Linux.
requiredAction: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
dueDate: 2026-08-30
knownRansomwareCampaignUse: Unknown
forensicTriage: Yes
notes: This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: ; https://git.kernel.org/stable/c/14200d435af9a9eeb444f529fc2f689a236b7962; https://git.kernel.org/stable/c/65fb14cbebb0cd0eff903a22d33537ddc8b95769; https://git.kernel.org/stable/c/46f201f8b4c39633a1fa3dc12459f506d470993d; https://git.kernel.org/stable/c/6374fb9edf72c67a118a2c214a0dddd04c921e0a; https://git.kernel.org/stable/c/e9eacf19281ea2498b36291b56c9606118c2d74e; https://git.kernel.org/stable/c/736b380e28d0480c7bc3e022f1950f31fe53a7c5 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-53362

初めて観測: 2026-10-02T21:06:48Z / 最後に観測: 2026-10-02T21:06:48Z(last_observed_at。値の変更を最後に確認した時刻)

観測した変更

取り込み開始以降、KEV の値の変更は観測していません。

CVE レコード(CVE Program)

state: PUBLISHED
datePublished: 2026-07-04T11:56:35.864Z
dateUpdated: 2026-08-28T16:52:44.062Z

CNA の affected

Linux Linux (773ba4fe9104a64a54d1c00f0fb6ffb95def2b03 〜 <14200d435af9a9eeb444f529fc2f689a236b7962; 773ba4fe9104a64a54d1c00f0fb6ffb95def2b03 〜 <65fb14cbebb0cd0eff903a22d33537ddc8b95769; 773ba4fe9104a64a54d1c00f0fb6ffb95def2b03 〜 <46f201f8b4c39633a1fa3dc12459f506d470993d; 773ba4fe9104a64a54d1c00f0fb6ffb95def2b03 〜 <6374fb9edf72c67a118a2c214a0dddd04c921e0a; 773ba4fe9104a64a54d1c00f0fb6ffb95def2b03 〜 <e9eacf19281ea2498b36291b56c9606118c2d74e; 773ba4fe9104a64a54d1c00f0fb6ffb95def2b03 〜 <736b380e28d0480c7bc3e022f1950f31fe53a7c5)
Linux Linux (6.0; 0 〜 <6.0 (unaffected); 6.1.177 〜 <=6.1.* (unaffected); 6.6.144 〜 <=6.6.* (unaffected); 6.12.95 〜 <=6.12.* (unaffected); 6.18.38 〜 <=6.18.* (unaffected); 7.1.3 〜 <=7.1.* (unaffected); 7.2 〜 <=* (unaffected))

KEV と CNA で製品の表記が異なる。KEV の vendorProject・product と CNA の affected が、大文字小文字を無視した包含で一致しなかった(機械的な照合で、どちらが正しいかは判定していない)。

外部のページ

出典: CISA Known Exploited Vulnerabilities Catalog(CISA KEV。CC0 1.0)。詳しくは出典表記とライセンス。

出典: CVE Program(CVE レコード)。詳しくは出典表記とライセンス。

Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation. MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.

脆弱性の一覧へ