PatchTheCVECVE-2026-53026: In the Linux kernel, the following vulnerability has been resolved: NFSD: fix nfs4_file access extra count in
CVE-2026-53026 is a high-severity flaw (CVSS 7.5) affecting linux kernel. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
In the Linux kernel, the following vulnerability has been resolved: NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg In nfsd4_add_rdaccess_to_wrdeleg, if fp->fi_fds[O_RDONLY] is already set by another thread, __nfs4_file_get_access should not be called to increment the nfs4_file access count since that was already done by the thread that added READ access to the file. The extra fi_access count in nfs4_file can prevent the
Why this priority
- High severity
- Remotely exploitable, no login, no user action
- On your watchlist
A fixed release or distro patch exists.
Risk facts
| CVSS score | 7.5 (High) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 0.4% (top 63%) |
| CISA exploited list | No |
| Published | 2026-06-24 |
| Last modified | 2026-07-15 |
Last updated 2026-07-15 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2026-53026?
linux kernel: upgrade to 6.18.33, 7.0.10. Exact commands for each OS are on this page.
Is CVE-2026-53026 being exploited?
CVE-2026-53026 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2026-53026 affect?
CVE-2026-53026 affects linux kernel. Severity is high (CVSS 7.5). In the Linux kernel, the following vulnerability has been resolved: NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg In nfsd4_add_rdaccess_to_wrdeleg, if fp->fi_fds[O_RDONLY] is already set by another thread, __nfs4
How urgent is CVE-2026-53026?
Priority 45/100. High severity; Remotely exploitable, no login, no user action; On your watchlist
Software pages
Related CVEs
- CVE-2024-38564 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach
- CVE-2026-63938 CRITICAL 9.3 UPGRADE In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Check PSC request indices again
- CVE-2026-63937 HIGH 8.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Use READ_ONCE() when reading en
- CVE-2026-63927 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: Fix use after free in debug co
- CVE-2026-63925 HIGH 8.1 UPGRADE In the Linux kernel, the following vulnerability has been resolved: macsec: fix replay protection at XPN lowe