Linux: Integer Underflow (Wrap or Wraparound)
CVE-2026-53178 is a high-severity integer underflow (wrap or wraparound) vulnerability in Linux, with a CVSS 3.1 base score of 8.1 out of 10. It can be exploited from the same local network by an unauthenticated attacker, without any action from a user. The record lists versions 18143799ad51a32b1351e4e1591b6285a0a9d7dd, 8863ac3a4fedf86b0ef5b8ecc37fbaa52f2a8160, 637e0ea73f690028796ee2fc72a2ac4ec32968c6 as the first without the flaw, so updating Linux to one of those releases or later removes the exposure. There is no confirmed exploitation so far. EPSS estimates a 0.4% chance of exploitation within 30 days, which is low compared with other CVEs.
High severity with no evidence of exploitation so far.
What to do
- Update Linux to 18143799ad51a32b1351e4e1591b6285a0a9d7dd or 8863ac3a4fedf86b0ef5b8ecc37fbaa52f2a8160 or 637e0ea73f690028796ee2fc72a2ac4ec32968c6 or 542d65a6dbd9733baab96313c9fe76a76e93f484, whichever matches your release line, or a later version.
- Update Linux Kernel to 7.0.13 or a later version.
Affected products and versions
| Vendor | Product | Affected versions | Fixed in |
|---|---|---|---|
| Linux | Linux | d3fcee1b78a533c256077f1300dd236801397cf7 up to, but not including, 18143799ad51a32b1351e4e1591b6285a0a9d7dd; d3fcee1b78a533c256077f1300dd236801397cf7 up to, but not including, 8863ac3a4fedf86b0ef5b8ecc37fbaa52f2a8160; d3fcee1b78a533c256077f1300dd236801397cf7 up to, but not including, 637e0ea73f690028796ee2fc72a2ac4ec32968c6; d3fcee1b78a533c256077f1300dd236801397cf7 up to, but not including, 542d65a6dbd9733baab96313c9fe76a76e93f484; d3fcee1b78a533c256077f1300dd236801397cf7 up to, but not including, 88e994c57a79f62d5338231d8d37ee8dd98baffe; 1b786350924cc0fa30d4434470b32f24e8ddd107; 5.10.273 up to, but not including, 5.11; 5.15 | 18143799ad51a32b1351e4e1591b6285a0a9d7dd, 8863ac3a4fedf86b0ef5b8ecc37fbaa52f2a8160, 637e0ea73f690028796ee2fc72a2ac4ec32968c6, 542d65a6dbd9733baab96313c9fe76a76e93f484, 88e994c57a79f62d5338231d8d37ee8dd98baffe, 5.11 |
| Linux | Linux Kernel | 5.15 up to, but not including, 7.0.13; 7.1 | 7.0.13 |
Version data comes from the organisation that assigned the CVE. Confirm against the vendor advisory before deciding you are unaffected.
How the severity score breaks down
- Attack vector
- AdjacentThe attacker must be on the same local network segment.
- Attack complexity
- LowNo special conditions are needed; the attack works reliably.
- Privileges required
- NoneNo account or login is needed.
- User interaction
- NoneNo action by a victim is required.
- Scope
- UnchangedImpact stays within the vulnerable component.
- Confidentiality
- HighAll data handled by the component can be read.
- Integrity
- NoneNothing can be modified.
- Availability
- HighThe component can be taken down completely.
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H. Scored by CNA.
Official description
In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: rtw_mlme: add bounds checks before ie_length subtraction Add guards to ensure ie_length is large enough before subtracting fixed IE offsets to prevent unsigned integer underflow.
Source: the CVE record as published by its numbering authority, via NVD and CVE.org.
The underlying weakness: Integer Underflow (Wrap or Wraparound)
The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.
More Integer Underflow (Wrap or Wraparound) vulnerabilities (CWE-191)
Timeline
- CVE record published.
- Record last changed materially (score, affected products, status or references).
References
Patches and release notes
Other references
Recent Integer Underflow (Wrap or Wraparound) vulnerabilities
- 9.8 Critical severity
- 7.8 High severity
- 7.8 High severity
- 9.1 Critical severity
- 7.5 High severity
- 7.5 High severity
Spotted an error? Tell us.