CVE-2026-53151

rxrpc: Fix the ACK parser to extract the SACK table for parsing

CVE-2026-53151 is fixed in 36 products on 1 platform, first by DEBIAN-CVE-2026-53151, released June 28, 2026. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
9.8
Moderate
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0067
52nd percentile

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix the ACK parser to extract the SACK table for parsing Fix modification of the received skbuff in rxrpc_input_soft_acks() and a potential incorrect access of the buffer in a fragmented UDP packet (the packet would probably have to be deliberately pre-generated as fragmented) when AF_RXRPC tries to extract the contents of the SACK table by copying out the contents of the SACK table into a buffer before attempting to parse AF_RXRPC assumes that it can just call skb_condense() and then validly access the SACK table from skb->data and that it will be a flat buffer - but skb_condense() can silently fail to do anything under some circumstances. Note that whilst rxrpc_input_soft_acks() should be able to parse extended ACKs, the rest of AF_RXRPC doesn't currently support that. Further, there's then no need to call skb_condense() in rxrpc_input_ack(), so don't.

Where it's fixed

ProductFixed inFixReleased
Linux
kernel-uek · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-core · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-core · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-debug · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-debug · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-debug-core · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-debug-core · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-debug-devel · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-debug-devel · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-debug-modules · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-debug-modules · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-debug-modules-core · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-debug-modules-core · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-debug-modules-deprecated · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-debug-modules-deprecated · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-debug-modules-desktop · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-debug-modules-desktop · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-debug-modules-extra · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-debug-modules-extra · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-debug-modules-extra-netfilter · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-debug-modules-extra-netfilter · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-debug-modules-usb · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-debug-modules-usb · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-debug-modules-wireless · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-debug-modules-wireless · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-devel · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-devel · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-doc · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-doc · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-modules · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-modules · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-modules-core · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-modules-core · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-modules-deprecated · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-modules-deprecated · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-modules-desktop · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-modules-desktop · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-modules-extra · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-modules-extra · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-modules-extra-netfilter · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-modules-extra-netfilter · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-modules-usb · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-modules-usb · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-modules-wireless · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-modules-wireless · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-tools · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-tools · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek64k · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek64k · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek64k-core · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek64k-core · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek64k-devel · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek64k-devel · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek64k-modules · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek64k-modules · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek64k-modules-core · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek64k-modules-core · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek64k-modules-deprecated · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek64k-modules-deprecated · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek64k-modules-desktop · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek64k-modules-desktop · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek64k-modules-extra · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek64k-modules-extra · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek64k-modules-extra-netfilter · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek64k-modules-extra-netfilter · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek64k-modules-usb · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek64k-modules-usb · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek64k-modules-wireless · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek64k-modules-wireless · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
linux · Debian 13.5 (trixie) 6.12.95-1 DEBIAN-CVE-2026-53151 Jun 28, 2026
linux · Debian 14 7.0.13-1 DEBIAN-CVE-2026-53151 Jun 28, 2026

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.