[KEV] CVE-2026-53362 -- CVSS 0.0 Vulnerability Briefing

[KEV] CVE-2026-53362 | CVSS 0.0 (Low) | Exploit: Operational

What Is It

CVE-2026-53362 is an unspecified privilege-escalation vulnerability in the IPv6 networking subsystem of the Linux Kernel, affecting Linux-based products including SUSE, Red Hat, and other systems that use affected kernel versions.

Technical Detail

The vulnerability affects the Linux Kernel IPv6 networking subsystem and may allow an attacker to elevate privileges on an affected system. Publicly available information does not specify the underlying flaw, required access level, or exact triggering conditions. Successful exploitation could allow an attacker to obtain higher privileges than intended on the target host.

Exploitation Status

Exploit maturity is assessed as Operational, indicating that a functioning exploit is available for use in real-world operations. CISA has confirmed active exploitation in the wild. The vulnerability was added to the CISA Known Exploited Vulnerabilities Catalog on August 27, 2026.

Who Is Targeting This

No specific threat actor attribution at this time.

What To Do

Prioritize deployment of vendor-provided Linux Kernel security updates across affected systems, including distributions supplied by SUSE, Red Hat, and other Linux vendors. Identify systems with IPv6 enabled and validate installed kernel versions against vendor advisories. Federal civilian executive branch agencies should patch by the applicable CISA KEV remediation deadline or apply mitigations; the supplied data does not include a specific remediation due date. No vendor-specific workaround, exploit indicator, or detection signature has been confirmed in the available information.