CVE-2026-53246

highCVSS 7.8covered by 19 sourcesfirst seen 2026-06-09

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Open vSwitch; - SCTP protocol; (CVE-2026-53224, CVE-2026-53246, CVE-2026-64531)

CSIRTS triage

Other

What: The vulnerability involves validating the length of a cached peer INIT chunk during COOKIE_ECHO processing.
Who is affected: Deployments using SCTP may be affected.
Urgency: Remediation is urgent due to the high severity rating of 7.8.
Action: Apply the necessary patches as they become available.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch CVE-2026-53246

Get an email if CVE-2026-53246 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Exploitation outlook

Low exploitation risk0.44% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 37% of all EPSS-scored CVEs.

Advisory coverage (19)

unknownUSN-8658-3: Linux kernel vulnerabilitiesubuntu · 2026-08-25
unknownUSN-8643-4: Linux kernel vulnerabilitiesubuntu · 2026-08-25
unknownUSN-8658-2: Linux kernel (IBM) vulnerabilitiesubuntu · 2026-08-21
lowUSN-8661-2: Linux kernel (Low Latency) vulnerabilitiesubuntu · 2026-08-21
unknownUSN-8643-3: Linux kernel (NVIDIA) vulnerabilitiesubuntu · 2026-08-21
unknownUSN-8664-1: Linux kernel (NVIDIA BaseOS) vulnerabilitiesubuntu · 2026-08-20
unknownUSN-8663-1: Linux kernel (NVIDIA) vulnerabilitiesubuntu · 2026-08-20
unknownUSN-8644-2: Linux kernel (GCP) vulnerabilitiesubuntu · 2026-08-20
unknownUSN-8661-1: Linux kernel vulnerabilitiesubuntu · 2026-08-20
unknownUSN-8660-1: Linux kernel vulnerabilitiesubuntu · 2026-08-20
unknownUSN-8629-3: Linux kernel (HWE) vulnerabilitiesubuntu · 2026-08-18
unknownUSN-8646-1: Linux kernel vulnerabilitiesubuntu · 2026-08-18
unknownUSN-8645-1: Linux kernel (Oracle) vulnerabilitiesubuntu · 2026-08-18
unknownUSN-8644-1: Linux kernel vulnerabilitiesubuntu · 2026-08-18
unknownUSN-8643-1: Linux kernel vulnerabilitiesubuntu · 2026-08-18
unknownUSN-8629-2: Linux kernel (AWS) vulnerabilitiesubuntu · 2026-08-17
unknownUSN-8637-1: Linux kernel (OEM) vulnerabilitiesubuntu · 2026-08-13
unknownUSN-8629-1: Linux kernel vulnerabilitiesubuntu · 2026-08-12
highCVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processingmsrc · 2026-06-09

External references

NVD record for CVE-2026-53246

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2026-53246 status](https://www.csirts.com/badge/CVE-2026-53246)](https://www.csirts.com/cve/CVE-2026-53246)