# CVE-2026-53362: Linux Kernel buffer overflow in IPv6 paged allocation

Source: https://junglewise.ai/threats/cve-2026-53362-linux-kernel-buffer-overflow-in-ipv6-paged-allocation  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-04. Updated: 2026-09-24  
License: CC BY 4.0 with a link back

CVE-2026-53362 · Severity: critical · CVSS 6.2 · Exploited in the wild · Published 2026-07-04

The Linux Kernel's IPv6 networking component contains a vulnerability that allows an attacker with local access to gain elevated system privileges. This vulnerability has been actively exploited in real-world attacks and affects multiple enterprise Linux distributions, creating significant risk for organizations running vulnerable systems.

Technologies: [Linux Kernel](https://junglewise.ai/threats/technologies/kernel), [Red Hat Enterprise Linux](https://junglewise.ai/threats/technologies/red-hat-enterprise-linux). Vendors: [Linux](https://junglewise.ai/threats/vendors/linux), [Red Hat](https://junglewise.ai/threats/vendors/red-hat), [Suse](https://junglewise.ai/threats/vendors/suse).

## Quick answers

**Is CVE-2026-53362 exploited in the wild?** Yes. CVE-2026-53362 is known to be exploited in the wild, first recorded on 27 August 2026. Treat it as urgent.

**How severe is CVE-2026-53362?** Critical severity, with a CVSS score of 6.2, published 4 July 2026.

**Which products and versions are affected?** Linux Kernel 773ba4fe9104 to 736b380e28d0.

**Is there a fix for CVE-2026-53362?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-53362 attacked?** It is attacked with local access.

**Am I affected by CVE-2026-53362?** Check whether you run Linux Kernel, Linux Kernel, Red Hat Enterprise Linux or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability is an unspecified privilege escalation flaw in the Linux Kernel's IPv6 networking subsystem. The exact nature of the vulnerability class and root cause are not disclosed in the available advisory information. Exploitation requires local access to the affected system. Successful exploitation allows an attacker to escalate privileges and gain root or elevated access. The vulnerability has been observed exploited in active attacks, indicating public exploitation techniques are available.

## Affected products

- Linux Linux Kernel <UNKNOWN>
- SUSE SUSE Linux Enterprise
- Red Hat Red Hat Enterprise Linux

## Timeline

- 2026-08-27: disclosed
- exploited: Observed exploited in the wild

## Related threats

- [Linux IOMMU page table logic error in arm_lpae_split_blk_unmap](https://junglewise.ai/threats/cve-2026-56934-in-arm-lpae-split-blk-unmap-of-drivers-iommu-io-pgtable-arm)
- [Linux kernel null pointer dereference in TCP established lookup](https://junglewise.ai/threats/cve-2026-99288-in-the-linux-kernel-the-following-vulnerability-has-been-resolved)
- [Linux kernel xen-netback double unmap memory corruption](https://junglewise.ai/threats/cve-2026-99287-in-the-linux-kernel-the-following-vulnerability-has-been-resolved)
- [Linux kernel xen-netback race condition in XenBus disconnect](https://junglewise.ai/threats/cve-2026-99286-in-the-linux-kernel-the-following-vulnerability-has-been-resolved)
- [Linux kernel shared-frag flag loss in skb_zerocopy](https://junglewise.ai/threats/cve-2026-99284-in-the-linux-kernel-the-following-vulnerability-has-been-resolved)