CVE-2026-52907

highpriority · track · 0EPSS 0.001 · 1 %ileDEEUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.11% (1st) EPSS

CVSS 7.8 · high

Is it mine?

19 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · cert_bund · nvd

EPSS · scored 2026-10-28

In the Linux kernel, the following vulnerability has been resolved: media: rockchip: rkcif: fix off by one bugs Change these comparisons from > vs >= to avoid accessing one element beyond the end of the arrays. While at it, use ARRAY_SIZE instead of the _MAX enum values. [fix cosmetic issues]

cvss

Technical severity, 0–10. One row per scoring source.

7.8

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · ENISA EU

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondaryexploitability 1.8 · impact 5.9

v3.17.1highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-193USprimary

affected products (19)

Products and version ranges known to be affected.

Amazon Linux 2all versionscert_bundDEcpe:/o:amazon:linux_2:-
Debian Linuxall versionscert_bundDEcpe:/o:debian:debian_linux:-
IBM Security Verify Accessall versionscert_bundDEcpe:/a:ibm:security_verify_access:-
Open Source Linux Kernelall versionscert_bundDEcpe:/o:linux:linux_kernel:-
Oracle Linuxall versionscert_bundDEcpe:/o:oracle:linux:-
Proxmox Virtual Environment Kernelall versionscert_bundDEcpe:/a:proxmox:virtual_environment:kernel
RESF Rocky Linuxall versionscert_bundDEcpe:/o:resf:rocky_linux:-
Red Hat Enterprise Linuxall versionscert_bundDEcpe:/o:redhat:enterprise_linux:-
Red Hat OpenShift Container Platformall versionscert_bundDEcpe:/a:redhat:openshift:container_platform
SUSE Linuxall versionscert_bundDEcpe:/o:suse:suse_linux:-
SUSE openSUSEall versionscert_bundDEcpe:/o:suse:opensuse:-
Ubuntu Linuxall versionscert_bundDEcpe:/o:canonical:ubuntu_linux:-
Linux Linuxall versionsenisa_euvdEU
Linux Linux≤ 6.19enisa_euvdEU
Linux Linux< 7.0.4enisa_euvdEU
Linux Linux< 7.1enisa_euvdEU
Linux Linux1f2353f5a1af… → 73e119036b3a…enisa_euvdEU
Linux Linux1f2353f5a1af… → e4056b84af0f…enisa_euvdEU
linux linux kernel6.19 → 7.0.4nvdUScpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

advisories (1)

Vendor and ecosystem advisories describing this.

WID-SEC-W-2026-1870Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of ServiceDeutsch2026-06-09csaf · cert_bundDE
Eiin Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder andere, nicht näher bezeichnete Angriffe durchzuführen.

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd cert_bund nvd NVD CVE.org MITRE

published 2026-06-09modified 2026-07-23

related (331)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2021-3156US	high7.8OT critical	100.0% (100th)	KEV	2021-01-26
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line arg…
CVE-2003-0466US	critical9.8	78.1% (100th)	Exploit	2003-08-27
Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0 throug…
CVE-2022-3786US	high7.5	92.5% (100th)	Exploit	2022-11-01
A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification…
CVE-2021-23017US	high7.7	53.5% (99th)	Exploit	2021-06-01
A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in…
CVE-2001-0609US	critical9.8	18.2% (97th)	Exploit	2001-08-02
Format string vulnerability in Infodrom cfingerd 1.4.3 and earlier allows a remote attacker to gain additional privileges via a malformed ident reply that is passed to the syslog f…

+326 more

references (6)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan