Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-53175

In the Linux kernel, the following vulnerability has been resolved: inet: frags: fix use-after-free caused by the fqdir_pre_exit() flush On netns teardown, fqdir_pre_exit() walks the fqdir rhashtable and flushes every fragment queue that is not yet complete using inet_frag_queue_flush(). That helper frees all the skbs queued on the fragment queue but does not set INET_FRAG_COMPLETE, and leaves q->fragments_tail and q->last_run_head pointing at the freed skbs. The queue itself stays in the rhas
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:8ccdda7adaf3332ec0be637cfebc8c7dfe1939d77e3b5848ea9b67068e09bb2e
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
2

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 10 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/ipv4/inet_fragment.c","net/ipv4/ip_fragment.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"0e823ca0e7391630784ae7dd0981b7ad170a93d9","status":"affected","version":"22ee4010866da81aeee08e1ea3fddbe418feb212","versionType":"git"},{"lessThan":"c22599cc90e1cd5f8129c8670bd68a02ff7177b4","status":"affected","version":"543555954b1ee8d1903a7020324efb41b0c97428","versionType":"git"},{"lessThan":"89b909e9704587bfecc1aab1d37e98faee03b9f9","status":"affected","versio…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:01519b7341dfea852989be753da21bcb8028eb62f8eb0b20be426ae5473fe12d · sha256:146b061a9149e133… · /containers/cna/affected/0

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9"],"defaultStatus":"unaffected","packageName":"kernel","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:01519b7341dfea852989be753da21bcb8028eb62f8eb0b20be426ae5473fe12d · sha256:146b061a9149e133… · /containers/adp/0/affected/6

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:7"],"defaultStatus":"unaffected","packageName":"kernel-rt","product":"Red Hat Enterprise Linux 7","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:01519b7341dfea852989be753da21bcb8028eb62f8eb0b20be426ae5473fe12d · sha256:146b061a9149e133… · /containers/adp/0/affected/3

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:6"],"defaultStatus":"unknown","packageName":"kernel","product":"Red Hat Enterprise Linux 6","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:01519b7341dfea852989be753da21bcb8028eb62f8eb0b20be426ae5473fe12d · sha256:146b061a9149e133… · /containers/adp/0/affected/1

{"defaultStatus":"affected","product":"Linux","programFiles":["net/ipv4/inet_fragment.c","net/ipv4/ip_fragment.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.19"},{"lessThan":"6.19","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.94","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.36","versionType":"semver"},{"lessThanOrEqual":"7.0.*","status":"unaffected","version":"7.0.13","version…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:01519b7341dfea852989be753da21bcb8028eb62f8eb0b20be426ae5473fe12d · sha256:146b061a9149e133… · /containers/cna/affected/1

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8"],"defaultStatus":"unaffected","packageName":"kernel-rt","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:01519b7341dfea852989be753da21bcb8028eb62f8eb0b20be426ae5473fe12d · sha256:146b061a9149e133… · /containers/adp/0/affected/5

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:7"],"defaultStatus":"unaffected","packageName":"kernel","product":"Red Hat Enterprise Linux 7","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:01519b7341dfea852989be753da21bcb8028eb62f8eb0b20be426ae5473fe12d · sha256:146b061a9149e133… · /containers/adp/0/affected/2

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10"],"defaultStatus":"unaffected","packageName":"kernel","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:01519b7341dfea852989be753da21bcb8028eb62f8eb0b20be426ae5473fe12d · sha256:146b061a9149e133… · /containers/adp/0/affected/0

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9"],"defaultStatus":"unaffected","packageName":"kernel-rt","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:01519b7341dfea852989be753da21bcb8028eb62f8eb0b20be426ae5473fe12d · sha256:146b061a9149e133… · /containers/adp/0/affected/7

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8"],"defaultStatus":"unaffected","packageName":"kernel","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:01519b7341dfea852989be753da21bcb8028eb62f8eb0b20be426ae5473fe12d · sha256:146b061a9149e133… · /containers/adp/0/affected/4
cvss · 2 assertions

{"metric":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}

  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:01519b7341dfea852989be753da21bcb8028eb62f8eb0b20be426ae5473fe12d · sha256:146b061a9149e133… · /containers/adp/0/metrics/1/cvssV3_1

{"metric":{"baseScore":9.8,"baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}

  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:01519b7341dfea852989be753da21bcb8028eb62f8eb0b20be426ae5473fe12d · sha256:146b061a9149e133… · /containers/cna/metrics/0/cvssV3_1

Affected products and versions

10 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/ipv4/inet_fragment.c","net/ipv4/ip_fragment.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"0e823ca0e7391630784ae7dd0981b7ad170a93d9","status":"affected","version":"22ee4010866da81aeee08e1ea3fddbe418feb212","versionType":"git"},{"lessThan":"c22599cc90e1cd5f8129c8670bd68a02ff7177b4","status":"affected","version":"543555954b1ee8d1903a7020324efb41b0c97428","versionType":"git"},{"lessThan":"89b909e9704587bfecc1aab1d37e98faee03b9f9","status":"affected","versio…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:01519b7341dfea852989be753da21bcb8028eb62f8eb0b20be426ae5473fe12d · sha256:146b061a9149e133… · /containers/cna/affected/0
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9"],"defaultStatus":"unaffected","packageName":"kernel","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:01519b7341dfea852989be753da21bcb8028eb62f8eb0b20be426ae5473fe12d · sha256:146b061a9149e133… · /containers/adp/0/affected/6
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:7"],"defaultStatus":"unaffected","packageName":"kernel-rt","product":"Red Hat Enterprise Linux 7","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:01519b7341dfea852989be753da21bcb8028eb62f8eb0b20be426ae5473fe12d · sha256:146b061a9149e133… · /containers/adp/0/affected/3
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:6"],"defaultStatus":"unknown","packageName":"kernel","product":"Red Hat Enterprise Linux 6","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:01519b7341dfea852989be753da21bcb8028eb62f8eb0b20be426ae5473fe12d · sha256:146b061a9149e133… · /containers/adp/0/affected/1
{"defaultStatus":"affected","product":"Linux","programFiles":["net/ipv4/inet_fragment.c","net/ipv4/ip_fragment.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.19"},{"lessThan":"6.19","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.94","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.36","versionType":"semver"},{"lessThanOrEqual":"7.0.*","status":"unaffected","version":"7.0.13","version…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:01519b7341dfea852989be753da21bcb8028eb62f8eb0b20be426ae5473fe12d · sha256:146b061a9149e133… · /containers/cna/affected/1
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8"],"defaultStatus":"unaffected","packageName":"kernel-rt","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:01519b7341dfea852989be753da21bcb8028eb62f8eb0b20be426ae5473fe12d · sha256:146b061a9149e133… · /containers/adp/0/affected/5
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:7"],"defaultStatus":"unaffected","packageName":"kernel","product":"Red Hat Enterprise Linux 7","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:01519b7341dfea852989be753da21bcb8028eb62f8eb0b20be426ae5473fe12d · sha256:146b061a9149e133… · /containers/adp/0/affected/2
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10"],"defaultStatus":"unaffected","packageName":"kernel","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:01519b7341dfea852989be753da21bcb8028eb62f8eb0b20be426ae5473fe12d · sha256:146b061a9149e133… · /containers/adp/0/affected/0
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9"],"defaultStatus":"unaffected","packageName":"kernel-rt","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:01519b7341dfea852989be753da21bcb8028eb62f8eb0b20be426ae5473fe12d · sha256:146b061a9149e133… · /containers/adp/0/affected/7
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8"],"defaultStatus":"unaffected","packageName":"kernel","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:01519b7341dfea852989be753da21bcb8028eb62f8eb0b20be426ae5473fe12d · sha256:146b061a9149e133… · /containers/adp/0/affected/4

Provider-owned CVSS observations

2 source assertions
{"metric":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:01519b7341dfea852989be753da21bcb8028eb62f8eb0b20be426ae5473fe12d · sha256:146b061a9149e133… · /containers/adp/0/metrics/1/cvssV3_1
{"metric":{"baseScore":9.8,"baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:01519b7341dfea852989be753da21bcb8028eb62f8eb0b20be426ae5473fe12d · sha256:146b061a9149e133… · /containers/cna/metrics/0/cvssV3_1

Source references

8 source assertions
{"tags":["vdb-entry","x_refsource_REDHAT"],"url":"https://access.redhat.com/security/cve/CVE-2026-53175"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:01519b7341dfea852989be753da21bcb8028eb62f8eb0b20be426ae5473fe12d · sha256:146b061a9149e133… · /containers/adp/0/references/0
{"name":"RHBZ#2492840","tags":["issue-tracking","x_refsource_REDHAT"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2492840"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:01519b7341dfea852989be753da21bcb8028eb62f8eb0b20be426ae5473fe12d · sha256:146b061a9149e133… · /containers/adp/0/references/1
{"url":"https://git.kernel.org/stable/c/010c3313a4d178dc2d3ce958d2e5cb055e2864c1"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:01519b7341dfea852989be753da21bcb8028eb62f8eb0b20be426ae5473fe12d · sha256:146b061a9149e133… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/0e823ca0e7391630784ae7dd0981b7ad170a93d9"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:01519b7341dfea852989be753da21bcb8028eb62f8eb0b20be426ae5473fe12d · sha256:146b061a9149e133… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/32594b09854970d7ba83eb2dc8c69a2edd158c8e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:01519b7341dfea852989be753da21bcb8028eb62f8eb0b20be426ae5473fe12d · sha256:146b061a9149e133… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/89b909e9704587bfecc1aab1d37e98faee03b9f9"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:01519b7341dfea852989be753da21bcb8028eb62f8eb0b20be426ae5473fe12d · sha256:146b061a9149e133… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/c22599cc90e1cd5f8129c8670bd68a02ff7177b4"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:01519b7341dfea852989be753da21bcb8028eb62f8eb0b20be426ae5473fe12d · sha256:146b061a9149e133… · /containers/cna/references/1
{"tags":["x_sadp-csaf-vex"],"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53175.json"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:01519b7341dfea852989be753da21bcb8028eb62f8eb0b20be426ae5473fe12d · sha256:146b061a9149e133… · /containers/adp/0/references/2

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer