CVE-2026-53002

critical · 9.8

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: remove sprintf usage Replace it with scnprintf, the buffer sizes are expected to be large enough to hold the result, no need for snprintf+overflow check. Increase buffer size in mangle_content_len() while at it. BUG: KASAN: stack-out-of-bounds in vsnprintf+0xea5/0x1270 Write of size 1 at addr [..] vsnprintf+0xea5/0x1270 sprintf+0xb1/0xe0 mangle_content_len+0x1ac/0x280 nf_nat_sdp_session+0x1cc/0x240 process_sdp+0x8f8/0xb80 process_invite_request+0x108/0x2b0 process_sip_msg+0x5da/0xf50 sip_help_tcp+0x45e/0x780 nf_confirm+0x34d/0x990 [..]

9.8

CVSS

0.4%

EPSS (exploit prob.)

31st

EPSS percentile

2026-06-24

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-787

Affected products

Vendor	Product	Affected versions
linux	linux_kernel	>= 2.6.20, < 5.10.258
linux	linux_kernel	>= 5.11, < 5.15.209
linux	linux_kernel	>= 5.16, < 6.1.175
linux	linux_kernel	>= 6.2, < 6.6.141
linux	linux_kernel	>= 6.7, < 6.12.91
linux	linux_kernel	>= 6.13, < 6.18.33
linux	linux_kernel	>= 6.19, < 7.0.10
redhat	enterprise_linux	7.0
redhat	enterprise_linux	8.0
redhat	enterprise_linux	9.0
redhat	enterprise_linux	10.0

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-53002