CVE-2026-53217

Last refreshed2026-10-17

Status: UPDATED | Advisory ID: CVE-2026-53217

Key Details

CVE	CVE-2026-53217
CVSS Score / Version	8.6 (High) / CVSS v3.1
Updated	2026-10-16
CVSS Vector	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L`
CVSS Prose	attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is low; availability impact is low.
Affected products	Linux Kernel

Vendor	Product	Affected Versions	Patch Status
Linux	Linux Kernel

Vendor

Product

Affected Versions

Patch Status

Linux

Linux Kernel

Subsystems	OT Supporting Infrastructure
Sectors	All Sectors

In the Linux kernel, the following vulnerability has been resolved:

net: mvpp2: sync RX data at the hardware packet offset

mvpp2 programs the RX queue packet offset, so hardware writes received

data at dma_addr + MVPP2_SKB_HEADROOM. The current CPU sync starts at

dma_addr and only covers rx_bytes + MVPP2_MH_SIZE bytes, which syncs the

unused headroom and misses the same number of bytes at the packet tail.

On non-coherent DMA systems this can leave the CPU reading stale cache

contents for the end of the received frame.

Use dma_sync_single_range_for_cpu() with MVPP2_SKB_HEADROOM as the range

offset so the sync covers the Marvell header and packet data actually

written by hardware. (NVD)

Monitor Linux's web page for any future patch releases.

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-53217
CVE	https://www.cve.org/CVERecord?id=CVE-2026-53217

Source

Reference

NVD

CVE