CVE-2026-52911 (GCVE-0-2026-52911)

Vulnerability from cvelistv5 – Published: 2026-06-21 06:18 – Updated: 2026-08-05 12:31
VLAI
Title
ksmbd: scope conn->binding slowpath to bound sessions only
Summary
In the Linux kernel, the following vulnerability has been resolved: ksmbd: scope conn->binding slowpath to bound sessions only When the binding SESSION_SETUP sets conn->binding = true, the flag stays set after the call so that the global session lookup in ksmbd_session_lookup_all() can find the session, which was not added to conn->sessions. Because the flag is connection-wide, the global lookup path will also resolve any other session by id if asked. Tighten the global lookup so that the returned session must have this connection registered in its channel xarray (sess->ksmbd_chann_list). The channel entry is installed by the existing binding_session path in ntlm_authenticate()/krb5_authenticate() when a SESSION_SETUP completes successfully, so this condition is a strict equivalent of "this connection has been accepted as a channel of this session". Connections that have not bound to a given session cannot reach it via the global table. The existing conn->binding gate for entering the slowpath is preserved so that non-binding connections keep the fast-path-only behavior, and the session->state check is unchanged.
Severity
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version
Linux Linux Affected: f5a544e3bab78142207e0242d22442db85ba1eff , < e74c00c6af428a39e564cdc5bd3a3648c6d8de87 (git)
Affected: f5a544e3bab78142207e0242d22442db85ba1eff , < e3a93ce6e25757b8f375e38b8f91e1d9da4edc1a (git)
Affected: f5a544e3bab78142207e0242d22442db85ba1eff , < 1ff46c9915c1cbf454db58a8cb87f7cac818e6a6 (git)
Affected: f5a544e3bab78142207e0242d22442db85ba1eff , < 974c1c224e85549dc3459f3bb2255bbbdd2b9372 (git)
Affected: f5a544e3bab78142207e0242d22442db85ba1eff , < 2cc8a4db633b10715450b291c1343859a4b2c509 (git)
Affected: f5a544e3bab78142207e0242d22442db85ba1eff , < 1e2bec062c5c9ec282636715166056d0998d746d (git)
Affected: f5a544e3bab78142207e0242d22442db85ba1eff , < b0da97c034b6107d14e537e212d4ce8b22109a58 (git)
Create a notification for this product.
Linux Linux Affected: 5.15
Unaffected: 0 , < 5.15 (semver)
Unaffected: 5.15.209 , ≤ 5.15.* (semver)
Unaffected: 6.1.175 , ≤ 6.1.* (semver)
Unaffected: 6.6.141 , ≤ 6.6.* (semver)
Unaffected: 6.12.91 , ≤ 6.12.* (semver)
Unaffected: 6.18.33 , ≤ 6.18.* (semver)
Unaffected: 7.0.10 , ≤ 7.0.* (semver)
Unaffected: 7.1 , ≤ * (original_commit_for_fix)
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "fs/smb/server/mgmt/user_session.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "e74c00c6af428a39e564cdc5bd3a3648c6d8de87",
              "status": "affected",
              "version": "f5a544e3bab78142207e0242d22442db85ba1eff",
              "versionType": "git"
            },
            {
              "lessThan": "e3a93ce6e25757b8f375e38b8f91e1d9da4edc1a",
              "status": "affected",
              "version": "f5a544e3bab78142207e0242d22442db85ba1eff",
              "versionType": "git"
            },
            {
              "lessThan": "1ff46c9915c1cbf454db58a8cb87f7cac818e6a6",
              "status": "affected",
              "version": "f5a544e3bab78142207e0242d22442db85ba1eff",
              "versionType": "git"
            },
            {
              "lessThan": "974c1c224e85549dc3459f3bb2255bbbdd2b9372",
              "status": "affected",
              "version": "f5a544e3bab78142207e0242d22442db85ba1eff",
              "versionType": "git"
            },
            {
              "lessThan": "2cc8a4db633b10715450b291c1343859a4b2c509",
              "status": "affected",
              "version": "f5a544e3bab78142207e0242d22442db85ba1eff",
              "versionType": "git"
            },
            {
              "lessThan": "1e2bec062c5c9ec282636715166056d0998d746d",
              "status": "affected",
              "version": "f5a544e3bab78142207e0242d22442db85ba1eff",
              "versionType": "git"
            },
            {
              "lessThan": "b0da97c034b6107d14e537e212d4ce8b22109a58",
              "status": "affected",
              "version": "f5a544e3bab78142207e0242d22442db85ba1eff",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "fs/smb/server/mgmt/user_session.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.15"
            },
            {
              "lessThan": "5.15",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.209",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.175",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.141",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.91",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.33",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.0.*",
              "status": "unaffected",
              "version": "7.0.10",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.209",
                  "versionStartIncluding": "5.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.175",
                  "versionStartIncluding": "5.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.141",
                  "versionStartIncluding": "5.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.91",
                  "versionStartIncluding": "5.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.33",
                  "versionStartIncluding": "5.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0.10",
                  "versionStartIncluding": "5.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1",
                  "versionStartIncluding": "5.15",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: scope conn-\u003ebinding slowpath to bound sessions only\n\nWhen the binding SESSION_SETUP sets conn-\u003ebinding = true, the flag stays\nset after the call so that the global session lookup in\nksmbd_session_lookup_all() can find the session, which was not added to\nconn-\u003esessions. Because the flag is connection-wide, the global lookup\npath will also resolve any other session by id if asked.\n\nTighten the global lookup so that the returned session must have this\nconnection registered in its channel xarray (sess-\u003eksmbd_chann_list).\nThe channel entry is installed by the existing binding_session path in\nntlm_authenticate()/krb5_authenticate() when a SESSION_SETUP completes\nsuccessfully, so this condition is a strict equivalent of \"this\nconnection has been accepted as a channel of this session\". Connections\nthat have not bound to a given session cannot reach it via the global\ntable.\n\nThe existing conn-\u003ebinding gate for entering the slowpath is preserved\nso that non-binding connections keep the fast-path-only behavior, and\nthe session-\u003estate check is unchanged."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:N - ksmbd is an in-kernel SMB server reachable over the network via SMB over TCP/RDMA, and the vulnerable session lookup is reached while processing remote SMB2/SMB3 requests.\nAC:L - After a successful SMB3 multichannel binding, the connection-wide binding flag remains set and the attacker can send ordinary subsequent SMB requests with chosen SessionIds. Session and tree IDs are low allocated identifiers, and no condition outside attacker control is required for the vulnerable lookup once binding state is established.\nPR:L - The durable exploit path requires the attacker to authenticate and successfully perform a non-guest multichannel binding SESSION_SETUP, which requires a valid low-privileged SMB account/session. The fixed issue is post-success binding state rather than a purely pre-authentication path.\nUI:N - No victim user action is required; the attacker sends SMB protocol messages directly to the ksmbd service.\nS:U - The impact remains within the kernel/ksmbd server security authority and exposed SMB resources. It does not cross a hypervisor, sandbox, or other separate security authority boundary.\nC:H - The bug allows a bound connection to resolve unrelated valid sessions by ID from the global session table, enabling access as another SMB session/user. In a reasonable deployment this can expose all files and share data accessible to the victim session.\nI:H - By obtaining another user\u0027s session context, the attacker can perform SMB operations as that user, including writes, deletes, metadata changes, or administrative IPC allowed to the victim. This is a high integrity impact on SMB-served data.\nA:H - The attacker can issue operations such as LOGOFF or destructive file/share operations against other resolved sessions, disrupting victim access and SMB-served data availability. This can be repeated remotely against the service."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T12:31:34.753Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/e74c00c6af428a39e564cdc5bd3a3648c6d8de87"
        },
        {
          "url": "https://git.kernel.org/stable/c/e3a93ce6e25757b8f375e38b8f91e1d9da4edc1a"
        },
        {
          "url": "https://git.kernel.org/stable/c/1ff46c9915c1cbf454db58a8cb87f7cac818e6a6"
        },
        {
          "url": "https://git.kernel.org/stable/c/974c1c224e85549dc3459f3bb2255bbbdd2b9372"
        },
        {
          "url": "https://git.kernel.org/stable/c/2cc8a4db633b10715450b291c1343859a4b2c509"
        },
        {
          "url": "https://git.kernel.org/stable/c/1e2bec062c5c9ec282636715166056d0998d746d"
        },
        {
          "url": "https://git.kernel.org/stable/c/b0da97c034b6107d14e537e212d4ce8b22109a58"
        }
      ],
      "title": "ksmbd: scope conn-\u003ebinding slowpath to bound sessions only",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-52911",
    "datePublished": "2026-06-21T06:18:49.342Z",
    "dateReserved": "2026-06-09T07:44:35.366Z",
    "dateUpdated": "2026-08-05T12:31:34.753Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-52911",
      "date": "2026-08-13",
      "epss": "0.00362",
      "percentile": "0.29198"
    },
    "microsoft_vex": {
      "current_release_date": "2026-07-03T01:04:01.000Z",
      "cve": "CVE-2026-52911",
      "id": "msrc_CVE-2026-52911",
      "initial_release_date": "2026-06-02T00:00:00.000Z",
      "product_status:known_not_affected": "1",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "ksmbd: scope conn-\u003ebinding slowpath to bound sessions only",
      "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-52911.json",
      "version": "3"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-52911\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-06-21T08:16:23.607\",\"lastModified\":\"2026-07-08T15:13:12.627\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nksmbd: scope conn-\u003ebinding slowpath to bound sessions only\\n\\nWhen the binding SESSION_SETUP sets conn-\u003ebinding = true, the flag stays\\nset after the call so that the global session lookup in\\nksmbd_session_lookup_all() can find the session, which was not added to\\nconn-\u003esessions. Because the flag is connection-wide, the global lookup\\npath will also resolve any other session by id if asked.\\n\\nTighten the global lookup so that the returned session must have this\\nconnection registered in its channel xarray (sess-\u003eksmbd_chann_list).\\nThe channel entry is installed by the existing binding_session path in\\nntlm_authenticate()/krb5_authenticate() when a SESSION_SETUP completes\\nsuccessfully, so this condition is a strict equivalent of \\\"this\\nconnection has been accepted as a channel of this session\\\". Connections\\nthat have not bound to a given session cannot reach it via the global\\ntable.\\n\\nThe existing conn-\u003ebinding gate for entering the slowpath is preserved\\nso that non-binding connections keep the fast-path-only behavior, and\\nthe session-\u003estate check is unchanged.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"fs/smb/server/mgmt/user_session.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"f5a544e3bab78142207e0242d22442db85ba1eff\",\"lessThan\":\"e74c00c6af428a39e564cdc5bd3a3648c6d8de87\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f5a544e3bab78142207e0242d22442db85ba1eff\",\"lessThan\":\"e3a93ce6e25757b8f375e38b8f91e1d9da4edc1a\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f5a544e3bab78142207e0242d22442db85ba1eff\",\"lessThan\":\"1ff46c9915c1cbf454db58a8cb87f7cac818e6a6\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f5a544e3bab78142207e0242d22442db85ba1eff\",\"lessThan\":\"974c1c224e85549dc3459f3bb2255bbbdd2b9372\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f5a544e3bab78142207e0242d22442db85ba1eff\",\"lessThan\":\"2cc8a4db633b10715450b291c1343859a4b2c509\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f5a544e3bab78142207e0242d22442db85ba1eff\",\"lessThan\":\"1e2bec062c5c9ec282636715166056d0998d746d\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f5a544e3bab78142207e0242d22442db85ba1eff\",\"lessThan\":\"b0da97c034b6107d14e537e212d4ce8b22109a58\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"fs/smb/server/mgmt/user_session.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"5.15\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"5.15\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.209\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.175\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.141\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.91\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18.33\",\"lessThanOrEqual\":\"6.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.0.10\",\"lessThanOrEqual\":\"7.0.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.1\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.15\",\"versionEndExcluding\":\"5.15.209\",\"matchCriteriaId\":\"6EDF0B07-5AB8-46F1-84C6-AAB5EF2C52B4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.175\",\"matchCriteriaId\":\"92385813-D91D-480D-83A1-F423D2CBB2BA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.141\",\"matchCriteriaId\":\"97A9FFFA-22BB-4D5C-9790-5A2286E392F7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.12.91\",\"matchCriteriaId\":\"C918746B-DE6F-448F-A93E-A04C5481688D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.13\",\"versionEndExcluding\":\"6.18.33\",\"matchCriteriaId\":\"96D99E49-380D-43AB-BDBA-25C3AD018A9C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.19\",\"versionEndExcluding\":\"7.0.10\",\"matchCriteriaId\":\"A13475D2-59BF-4716-94B5-7C1D239A2CF4\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/1e2bec062c5c9ec282636715166056d0998d746d\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/1ff46c9915c1cbf454db58a8cb87f7cac818e6a6\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/2cc8a4db633b10715450b291c1343859a4b2c509\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/974c1c224e85549dc3459f3bb2255bbbdd2b9372\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/b0da97c034b6107d14e537e212d4ce8b22109a58\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/e3a93ce6e25757b8f375e38b8f91e1d9da4edc1a\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/e74c00c6af428a39e564cdc5bd3a3648c6d8de87\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "None",
      "current_release_date": "2026-06-28T06:45:37+00:00",
      "cve": "CVE-2026-52911",
      "id": "CVE-2026-52911",
      "initial_release_date": "2026-06-21T00:00:00+00:00",
      "product_status:known_not_affected": "274",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: ksmbd: scope conn-\u003ebinding slowpath to bound sessions only",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-52911.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-08-06T01:16:04Z",
      "cve": "CVE-2026-52911",
      "id": "CVE-2026-52911",
      "initial_release_date": "2026-06-23T02:20:08Z",
      "product_status:known_not_affected": "293",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-52911",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-52911.json",
      "version": "4"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.