High 8.2Published Jun 25, 2026

CVE-2026-53268netfilter: conntrack_irc: fix possible out-of-bounds read

Updated under an hour ago (Oct 27, 2026, 6:40 AM ET)

Does this affect you?

It affects Linux and 5 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack_irc: fix possible out-of-bounds read When parsing fails after we've matched the command string we should bail out instead of trying to match a different command. This helper should be deprecated, given prevalence of TLS I doubt it has any relevance in 2026.

CVSS: 8.2 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Weakness (CWE): CWE-125
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 19, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	869f37d8e48f3911eb70f38a994feaa8f8380008 builds before 4cdda7f868f48e2f81579371584fdbdce37df2c8; 869f37d8e48f3911eb70f38a994feaa8f8380008 builds before 8a1d6e40dedfe1068aee094d851bd69e289c9fd6; 869f37d8e48f3911eb70f38a994feaa8f8380008 builds before 0afc802160af0df61ed374fdb97fb34cfe5cdf2f; 869f37d8e48f3911eb70f38a994feaa8f8380008 builds before 7c34f91305292083253df6a9f6c8ede02d4ccaea; from 869f37d8e48f3911eb70f38a994feaa8f8380008 before ddddd8271359961e403d11c90c9ba9fc38914f7e; 869f37d8e48f3911eb70f38a994feaa8f8380008 builds before 9e5da2379f968a3ea5a6e38921ab6201576466dc; from 869f37d8e48f3911eb70f38a994feaa8f8380008 before 573810f61bcd6b6815e2ff53bbdd2b9c9d747176; 869f37d8e48f3911eb70f38a994feaa8f8380008 builds before 66eba0ffce3b7e11449946b4cbbef8ea36112f56	CNA record
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518f_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name)	all versions	CISA ADP
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP siemens:siplus_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
linux linux_kernel linux:linux_kernel	from 2.6.20 before 5.10.259; from 5.11 before 5.15.210; from 5.16 before 6.1.176; from 6.2 before 6.6.143; from 6.7 before 6.12.94; from 6.13 before 6.18.36; from 6.19 before 7.0.13; 7.1; and 5 more ranges	NVD

References

References

https://git.kernel.org/stable/c/4cdda7f868f48e2f81579371584fdbdce37df2c8	patch
https://git.kernel.org/stable/c/8a1d6e40dedfe1068aee094d851bd69e289c9fd6	patch
https://git.kernel.org/stable/c/0afc802160af0df61ed374fdb97fb34cfe5cdf2f	patch
https://git.kernel.org/stable/c/7c34f91305292083253df6a9f6c8ede02d4ccaea	patch
https://git.kernel.org/stable/c/ddddd8271359961e403d11c90c9ba9fc38914f7e	patch
https://git.kernel.org/stable/c/9e5da2379f968a3ea5a6e38921ab6201576466dc	patch
https://git.kernel.org/stable/c/573810f61bcd6b6815e2ff53bbdd2b9c9d747176	patch
https://git.kernel.org/stable/c/66eba0ffce3b7e11449946b4cbbef8ea36112f56	patch
https://cert-portal.siemens.com/productcert/html/ssa-019113.html
https://cert-portal.siemens.com/productcert/html/ssa-457936.html
1–10 of 11

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.