CyberSecBulletin
CVE-2026-53217NVD status: Modified

Linux: Incorrect Calculation

Published Updated By the CyberSecBulletin desk

CVE-2026-53217 is a high-severity incorrect calculation vulnerability in Linux, with a CVSS 3.1 base score of 8.6 out of 10. It can be exploited remotely over the network by an unauthenticated attacker, without any action from a user. The record lists versions 60412bdd1b2576659eac23a23d2d9ff96228a643, 19f8bc139e9b149d1e5bf75ae761d1bb8dd3e7d8, a3ad9b5767c89531fc7dae951b51b0933dcf7051 as the first without the flaw, so updating Linux to one of those releases or later removes the exposure. There is no confirmed exploitation so far. EPSS estimates a 0.38% chance of exploitation within 30 days, which is low compared with other CVEs.

Next patch cycle

High severity with no evidence of exploitation so far.

What to do

  1. Update Linux to 60412bdd1b2576659eac23a23d2d9ff96228a643 or 19f8bc139e9b149d1e5bf75ae761d1bb8dd3e7d8 or a3ad9b5767c89531fc7dae951b51b0933dcf7051 or bede0f481b9137d73d1cf64309cbe4b94818a5d6, whichever matches your release line, or a later version.
  2. Update Linux Kernel to 5.10.259 or 5.15.210 or 6.1.176 or 6.6.143, whichever matches your release line, or a later version.
  3. Until you can update, restrict network access to the affected service so it is not reachable from untrusted networks.

Affected products and versions

VendorProductAffected versionsFixed in
LinuxLinuxe1921168bbd4810de4197446e52f652cd0dd9541 up to, but not including, 60412bdd1b2576659eac23a23d2d9ff96228a643; e1921168bbd4810de4197446e52f652cd0dd9541 up to, but not including, 19f8bc139e9b149d1e5bf75ae761d1bb8dd3e7d8; e1921168bbd4810de4197446e52f652cd0dd9541 up to, but not including, a3ad9b5767c89531fc7dae951b51b0933dcf7051; e1921168bbd4810de4197446e52f652cd0dd9541 up to, but not including, bede0f481b9137d73d1cf64309cbe4b94818a5d6; e1921168bbd4810de4197446e52f652cd0dd9541 up to, but not including, 23548007b3c66d628fc7d6b80d1e23be04ea10d9; e1921168bbd4810de4197446e52f652cd0dd9541 up to, but not including, a13199fa224e9f776f4005d5037df03aa9ea8f37; e1921168bbd4810de4197446e52f652cd0dd9541 up to, but not including, e302206ad84a407a7e5f3f6fe767ff5efaace689; e1921168bbd4810de4197446e52f652cd0dd9541 up to, but not including, 180235600934bef6add3be637c296d6cf3272e67; and 1 more ranges60412bdd1b2576659eac23a23d2d9ff96228a643, 19f8bc139e9b149d1e5bf75ae761d1bb8dd3e7d8, a3ad9b5767c89531fc7dae951b51b0933dcf7051, bede0f481b9137d73d1cf64309cbe4b94818a5d6, 23548007b3c66d628fc7d6b80d1e23be04ea10d9, a13199fa224e9f776f4005d5037df03aa9ea8f37
LinuxLinux Kernel5.5 up to, but not including, 5.10.259; 5.11 up to, but not including, 5.15.210; 5.16 up to, but not including, 6.1.176; 6.2 up to, but not including, 6.6.143; 6.7 up to, but not including, 6.12.94; 6.13 up to, but not including, 6.18.36; 6.19 up to, but not including, 7.0.13; 7.15.10.259, 5.15.210, 6.1.176, 6.6.143, 6.12.94, 6.18.36

Version data comes from the organisation that assigned the CVE. Confirm against the vendor advisory before deciding you are unaffected.

How the severity score breaks down

Attack vector
NetworkCan be exploited remotely over a network, including the internet.
Attack complexity
LowNo special conditions are needed; the attack works reliably.
Privileges required
NoneNo account or login is needed.
User interaction
NoneNo action by a victim is required.
Scope
UnchangedImpact stays within the vulnerable component.
Confidentiality
HighAll data handled by the component can be read.
Integrity
LowLimited modification of data is possible.
Availability
LowPerformance or availability is reduced.

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L. Scored by CNA.

Official description

In the Linux kernel, the following vulnerability has been resolved: net: mvpp2: sync RX data at the hardware packet offset mvpp2 programs the RX queue packet offset, so hardware writes received data at dma_addr + MVPP2_SKB_HEADROOM. The current CPU sync starts at dma_addr and only covers rx_bytes + MVPP2_MH_SIZE bytes, which syncs the unused headroom and misses the same number of bytes at the packet tail. On non-coherent DMA systems this can leave the CPU reading stale cache contents for the end of the received frame. Use dma_sync_single_range_for_cpu() with MVPP2_SKB_HEADROOM as the range offset so the sync covers the Marvell header and packet data actually written by hardware.

Source: the CVE record as published by its numbering authority, via NVD and CVE.org.

The underlying weakness: Incorrect Calculation

The product performs a calculation that generates incorrect or unintended results that are later used in security-critical decisions or resource management.

How developers prevent this class of flaw

  • Understand your programming language's underlying representation and how it interacts with numeric calculation. Pay close attention to byte size discrepancies, precision, signed/unsigned distinctions, truncation, conversion and casting between types, not-a-number calculations, and how your language handles numbers that are too large or too small for its underlying representation.
  • Perform input validation on any numeric input by ensuring that it is within the expected range. Enforce that the input meets both the minimum and maximum requirements for the expected range.
  • Use the appropriate type for the desired action. For example, in C/C++, only use unsigned types for values that could never be negative, such as height, width, or other numbers related to quantity.

More Incorrect Calculation vulnerabilities (CWE-682)

Timeline

  1. CVE record published.
  2. CISA published its SSVC assessment (exploitation: none, automatable: yes, technical impact: partial).
  3. Record last changed materially (score, affected products, status or references).

References

Recent Incorrect Calculation vulnerabilities

Spotted an error? Tell us.