Vulnerability in Linux
CVE-2026-53383
In the Linux kernel, the following vulnerability has been resolved: ksmbd: reject non-VALID session in compound request branch smb2_check_user_session() takes a shortcut for any operation that is not the first in a COMPOUND request: it r…
EPSS: 0.002 (13.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Linux — versions eb947403518ea3d93f6d89264bb1f5416bb0c7d0, 854156d12caa9d36de1cf5f084591c7686cc8a9d, 5005bcb4219156f1bf7587b185080ec1da08518e
References
Frequently asked questions
- What is CVE-2026-53383?
- CVE-2026-53383 is a high-severity vulnerability in Linux. CVSS score: 7.5/10. Published 2026-07-19.
- How severe is CVE-2026-53383?
- High severity. CVSS v3 base score is 7.5 out of 10.