GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2026-53160 (GCVE-0-2026-53160)

Vulnerability from cvelistv5 – Published: 2026-06-25 08:38 – Updated: 2026-08-05 12:33
VLAI
Title
misc: fastrpc: fix use-after-free race in fastrpc_map_create
Summary
In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: fix use-after-free race in fastrpc_map_create fastrpc_map_lookup returns a raw pointer after releasing fl->lock. The caller fastrpc_map_create then calls fastrpc_map_get (kref_get_unless_zero) on this unprotected pointer. A concurrent MEM_UNMAP can free the map between the lock release and the kref operation, resulting in a use-after-free on the freed slab object. Restore the take_ref parameter to fastrpc_map_lookup so the reference is acquired atomically under fl->lock before the pointer is exposed to the caller.
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 0b70ec82b309a4093106ff399da1911ad23b52d3 , < 0a3b87293fbd34fda651e6aead9964f84b893962 (git)
Affected: d7513b47082c08105e837b06cebeb3f07a5fa56f , < 8b080c89183196fd3e49212f2a1a1c4a29335b9c (git)
Affected: 802359a52676176b18713e33caa17572ad009057 , < 5b0166112019d1dce30b976ab28fd67f7f0be532 (git)
Affected: 10df039834f84a297c72ec962c0f9b7c8c5ca31a , < 992f121796b7ca83a5a8b93da24e971363206218 (git)
Affected: 10df039834f84a297c72ec962c0f9b7c8c5ca31a , < f20f6512ecb75c816e0debf4551a138f098615c4 (git)
Affected: 10df039834f84a297c72ec962c0f9b7c8c5ca31a , < 07ebe87915d8accdaba20c4f88c5ae430fe62fbb (git)
Affected: f3f59bab68e9bc714f757ab22f3fb36153014043 (git)
Affected: 6.1.156 , < 6.1.176 (semver)
Affected: 6.6.112 , < 6.6.143 (semver)
Affected: 6.12.53 , < 6.12.94 (semver)
Affected: 6.17.3 , < 6.18 (semver)
guessed Create a notification for this product.
Linux Linux Affected: 6.18
Unaffected: 0 , < 6.18 (semver)
Unaffected: 6.1.176 , ≤ 6.1.* (semver)
Unaffected: 6.6.143 , ≤ 6.6.* (semver)
Unaffected: 6.12.94 , ≤ 6.12.* (semver)
Unaffected: 6.18.36 , ≤ 6.18.* (semver)
Unaffected: 7.0.13 , ≤ 7.0.* (semver)
Unaffected: 7.1 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/misc/fastrpc.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "0a3b87293fbd34fda651e6aead9964f84b893962",
              "status": "affected",
              "version": "0b70ec82b309a4093106ff399da1911ad23b52d3",
              "versionType": "git"
            },
            {
              "lessThan": "8b080c89183196fd3e49212f2a1a1c4a29335b9c",
              "status": "affected",
              "version": "d7513b47082c08105e837b06cebeb3f07a5fa56f",
              "versionType": "git"
            },
            {
              "lessThan": "5b0166112019d1dce30b976ab28fd67f7f0be532",
              "status": "affected",
              "version": "802359a52676176b18713e33caa17572ad009057",
              "versionType": "git"
            },
            {
              "lessThan": "992f121796b7ca83a5a8b93da24e971363206218",
              "status": "affected",
              "version": "10df039834f84a297c72ec962c0f9b7c8c5ca31a",
              "versionType": "git"
            },
            {
              "lessThan": "f20f6512ecb75c816e0debf4551a138f098615c4",
              "status": "affected",
              "version": "10df039834f84a297c72ec962c0f9b7c8c5ca31a",
              "versionType": "git"
            },
            {
              "lessThan": "07ebe87915d8accdaba20c4f88c5ae430fe62fbb",
              "status": "affected",
              "version": "10df039834f84a297c72ec962c0f9b7c8c5ca31a",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "f3f59bab68e9bc714f757ab22f3fb36153014043",
              "versionType": "git"
            },
            {
              "lessThan": "6.1.176",
              "status": "affected",
              "version": "6.1.156",
              "versionType": "semver"
            },
            {
              "lessThan": "6.6.143",
              "status": "affected",
              "version": "6.6.112",
              "versionType": "semver"
            },
            {
              "lessThan": "6.12.94",
              "status": "affected",
              "version": "6.12.53",
              "versionType": "semver"
            },
            {
              "lessThan": "6.18",
              "status": "affected",
              "version": "6.17.3",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/misc/fastrpc.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.18"
            },
            {
              "lessThan": "6.18",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.176",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.143",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.94",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.36",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.0.*",
              "status": "unaffected",
              "version": "7.0.13",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.176",
                  "versionStartIncluding": "6.1.156",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.143",
                  "versionStartIncluding": "6.6.112",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.94",
                  "versionStartIncluding": "6.12.53",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.36",
                  "versionStartIncluding": "6.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0.13",
                  "versionStartIncluding": "6.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1",
                  "versionStartIncluding": "6.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "6.17.3",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmisc: fastrpc: fix use-after-free race in fastrpc_map_create\n\nfastrpc_map_lookup returns a raw pointer after releasing fl-\u003elock. The\ncaller fastrpc_map_create then calls fastrpc_map_get (kref_get_unless_zero)\non this unprotected pointer. A concurrent MEM_UNMAP can free the map\nbetween the lock release and the kref operation, resulting in a\nuse-after-free on the freed slab object.\n\nRestore the take_ref parameter to fastrpc_map_lookup so the reference\nis acquired atomically under fl-\u003elock before the pointer is exposed to\nthe caller."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The vulnerable code is reached through local FastRPC misc-device ioctls such as FASTRPC_IOCTL_MEM_MAP, FASTRPC_IOCTL_INVOKE, and FASTRPC_IOCTL_INIT_CREATE. There is no network or adjacent-path entry point.\nAC:L - The attacker can drive both sides of the race by issuing concurrent map-creating and MEM_UNMAP ioctls against the same FastRPC file context and DMA-buf fd. No condition outside attacker control is required beyond scheduling the race.\nPR:L - The ioctl path has no in-driver capable(), namespace capability, or credential check once the FastRPC device node is open. Exploitation requires local access to the device node as a basic user or device-authorized app, not real root.\nUI:N - No victim action is required after the attacker has local access. The attacker directly opens the FastRPC device and submits ioctls.\nS:U - This is a kernel memory safety bug in a local kernel driver and exploitation would affect the same kernel security authority. It is not a VM escape, IOMMU bypass, or other cross-scope boundary violation by itself.\nC:H - The bug is a use-after-free on struct fastrpc_map, a slab object containing pointers and DMA mapping state. Under the required high-severity rule, this memory corruption is treated as capable of enabling kernel information disclosure.\nI:H - The use-after-free can be raced with allocator reuse and involves refcount/list/DMA mapping state, making control of freed object contents plausibly exploitable for kernel memory corruption. Under the kernel guidance, UAFs receive high integrity impact.\nA:H - Even without full exploitation, racing kref_get_unless_zero() and later map-field use on a freed object can trigger kernel warnings, oopses, or crashes. Repeated local ioctls can therefore cause high availability impact."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T12:33:35.015Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/0a3b87293fbd34fda651e6aead9964f84b893962"
        },
        {
          "url": "https://git.kernel.org/stable/c/8b080c89183196fd3e49212f2a1a1c4a29335b9c"
        },
        {
          "url": "https://git.kernel.org/stable/c/5b0166112019d1dce30b976ab28fd67f7f0be532"
        },
        {
          "url": "https://git.kernel.org/stable/c/992f121796b7ca83a5a8b93da24e971363206218"
        },
        {
          "url": "https://git.kernel.org/stable/c/f20f6512ecb75c816e0debf4551a138f098615c4"
        },
        {
          "url": "https://git.kernel.org/stable/c/07ebe87915d8accdaba20c4f88c5ae430fe62fbb"
        }
      ],
      "title": "misc: fastrpc: fix use-after-free race in fastrpc_map_create",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-53160",
    "datePublished": "2026-06-25T08:38:42.138Z",
    "dateReserved": "2026-06-09T07:44:35.388Z",
    "dateUpdated": "2026-08-05T12:33:35.015Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-53160",
      "date": "2026-09-16",
      "epss": "0.00171",
      "percentile": "0.06794"
    },
    "microsoft_vex": {
      "current_release_date": "2026-07-03T01:02:11.000Z",
      "cve": "CVE-2026-53160",
      "id": "msrc_CVE-2026-53160",
      "initial_release_date": "2026-06-02T00:00:00.000Z",
      "product_status:known_not_affected": "1",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "misc: fastrpc: fix use-after-free race in fastrpc_map_create",
      "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-53160.json",
      "version": "3"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-53160\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-06-25T09:16:33.377\",\"lastModified\":\"2026-07-06T16:41:56.237\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nmisc: fastrpc: fix use-after-free race in fastrpc_map_create\\n\\nfastrpc_map_lookup returns a raw pointer after releasing fl-\u003elock. The\\ncaller fastrpc_map_create then calls fastrpc_map_get (kref_get_unless_zero)\\non this unprotected pointer. A concurrent MEM_UNMAP can free the map\\nbetween the lock release and the kref operation, resulting in a\\nuse-after-free on the freed slab object.\\n\\nRestore the take_ref parameter to fastrpc_map_lookup so the reference\\nis acquired atomically under fl-\u003elock before the pointer is exposed to\\nthe caller.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/misc/fastrpc.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"0b70ec82b309a4093106ff399da1911ad23b52d3\",\"lessThan\":\"0a3b87293fbd34fda651e6aead9964f84b893962\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"d7513b47082c08105e837b06cebeb3f07a5fa56f\",\"lessThan\":\"8b080c89183196fd3e49212f2a1a1c4a29335b9c\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"802359a52676176b18713e33caa17572ad009057\",\"lessThan\":\"5b0166112019d1dce30b976ab28fd67f7f0be532\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"10df039834f84a297c72ec962c0f9b7c8c5ca31a\",\"lessThan\":\"992f121796b7ca83a5a8b93da24e971363206218\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"10df039834f84a297c72ec962c0f9b7c8c5ca31a\",\"lessThan\":\"f20f6512ecb75c816e0debf4551a138f098615c4\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"10df039834f84a297c72ec962c0f9b7c8c5ca31a\",\"lessThan\":\"07ebe87915d8accdaba20c4f88c5ae430fe62fbb\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f3f59bab68e9bc714f757ab22f3fb36153014043\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"6.1.156\",\"lessThan\":\"6.1.176\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.6.112\",\"lessThan\":\"6.6.143\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.12.53\",\"lessThan\":\"6.12.94\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.17.3\",\"lessThan\":\"6.18\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/misc/fastrpc.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"6.18\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"6.18\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.176\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.143\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.94\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18.36\",\"lessThanOrEqual\":\"6.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.0.13\",\"lessThanOrEqual\":\"7.0.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.1\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-416\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.1.156\",\"versionEndExcluding\":\"6.1.176\",\"matchCriteriaId\":\"2F723391-80BC-4089-8B97-DB876D3D0DC2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.6.112\",\"versionEndExcluding\":\"6.6.143\",\"matchCriteriaId\":\"A4234ED2-98B5-46B5-B750-03C3C93736B0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.12.53\",\"versionEndExcluding\":\"6.12.94\",\"matchCriteriaId\":\"5B40FF3E-D78C-466F-B643-5E1E152A253D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.17.3\",\"versionEndExcluding\":\"6.18.36\",\"matchCriteriaId\":\"B59167EA-6BAB-470A-B520-F0F750C8E610\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.19\",\"versionEndExcluding\":\"7.0.13\",\"matchCriteriaId\":\"6A64BF9F-3BCA-42FD-98CB-8F03474D2B1E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"B1EF7059-E670-45F4-B422-54C40FA86390\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"0D38F0BF-A728-4133-A358-D44A2F7EE6D6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"EC732D08-5F7B-46D9-B154-E60C7F4F0A97\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.1:rc4:*:*:*:*:*:*\",\"matchCriteriaId\":\"E5910A9D-F60A-409A-B486-FE66BFEBA9B9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.1:rc5:*:*:*:*:*:*\",\"matchCriteriaId\":\"81DFF19E-9CF8-49C6-8C36-1E4038622933\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.1:rc6:*:*:*:*:*:*\",\"matchCriteriaId\":\"B0E8FC71-3952-444C-83E9-718DBBBEC615\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.1:rc7:*:*:*:*:*:*\",\"matchCriteriaId\":\"1039E95A-8CC3-4C88-8FF9-5C08EEB861C9\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/07ebe87915d8accdaba20c4f88c5ae430fe62fbb\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/0a3b87293fbd34fda651e6aead9964f84b893962\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/5b0166112019d1dce30b976ab28fd67f7f0be532\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/8b080c89183196fd3e49212f2a1a1c4a29335b9c\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/992f121796b7ca83a5a8b93da24e971363206218\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/f20f6512ecb75c816e0debf4551a138f098615c4\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "None",
      "current_release_date": "2026-06-26T07:44:02+00:00",
      "cve": "CVE-2026-53160",
      "id": "CVE-2026-53160",
      "initial_release_date": "2026-06-25T00:00:00+00:00",
      "product_status:known_not_affected": "274",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: misc: fastrpc: fix use-after-free race in fastrpc_map_create",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53160.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-08-31T16:44:27Z",
      "cve": "CVE-2026-53160",
      "id": "CVE-2026-53160",
      "initial_release_date": "2026-06-26T02:11:42Z",
      "product_status:first_fixed": "2",
      "product_status:known_affected": "424",
      "product_status:known_not_affected": "294",
      "product_status:recommended": "250",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-53160",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-53160.json",
      "version": "10"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.