Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
4358 articles · 196331 vulns · 36/41 feeds (7d)
← Back to list
—
CVE-2026-53306EXPLOITEDPATCHED
linux · linux_kernel

tty: hvc_iucv: fix off-by-one in number of supported devices

Description

A vulnerability was found in Linux Kernel up to 7.0.9. It has been declared as critical. This vulnerability affects unknown code of the component tty. Such manipulation of the argument hvc_iucv_table[] leads to off-by-one. This vulnerability is documented as CVE-2026-53306. The attack requires being on the local network. There is not any exploit available. It is recommended to upgrade the affected component.

Affected Products

VendorProductVersions
linuxlinux_kernel44a01d5ba8a4d543694461cd3e178cfa6b3f221b, 44a01d5ba8a4d543694461cd3e178cfa6b3f221b, 44a01d5ba8a4d543694461cd3e178cfa6b3f221b, 44a01d5ba8a4d543694461cd3e178cfa6b3f221b, 44a01d5ba8a4d543694461cd3e178cfa6b3f221b, 44a01d5ba8a4d543694461cd3e178cfa6b3f221b, 44a01d5ba8a4d543694461cd3e178cfa6b3f221b, 44a01d5ba8a4d543694461cd3e178cfa6b3f221b, 2.6.29, 7.0.9

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
linuxlinuxmitre_affected90%
open sourceopen source linux kernelcert_advisory90%

References

  • https://git.kernel.org/stable/c/3d3b89e6ab93bdd0efd45828bda6b0e61cc46dff
  • https://git.kernel.org/stable/c/484357dff256c816d9466bda35eb765685e4dc86
  • https://git.kernel.org/stable/c/11207e42a332eb8bbcb9fe74df9edd2a807c5607
  • https://git.kernel.org/stable/c/fed8b8f33a46db0ee2efdb000f4f630c86ed8ca4
  • https://git.kernel.org/stable/c/a76511bc654819425d3b15e77b523d7f9d81f064
  • https://git.kernel.org/stable/c/3104a3f40feb107f77d7116ad9bf6c210ab7babf
  • https://git.kernel.org/stable/c/f1dc8e72de9aabe5d96767a4e97219ac26b79fe5
  • https://git.kernel.org/stable/c/f2a880e802ad12d1e38039d1334fb1475d0f5241

Related News (9 articles)

Tier B
CERT-FR3d ago
Multiples vulnérabilités dans le noyau Linux d'Ubuntu (21 août 2026)
→ No new info (linked only)
Tier B
CERT-FR10d ago
Multiples vulnérabilités dans le noyau Linux de SUSE (14 août 2026)
→ No new info (linked only)
Tier B
CERT-FR17d ago
Multiples vulnérabilités dans le noyau Linux d'Ubuntu (07 août 2026)
→ No new info (linked only)
Tier B
CERT-FR24d ago
Multiples vulnérabilités dans le noyau Linux de SUSE (31 juillet 2026)
→ No new info (linked only)
Tier B
CERT-FR31d ago
Multiples vulnérabilités dans le noyau Linux de SUSE (24 juillet 2026)
→ No new info (linked only)
Tier B
BSI Advisories55d ago
[NEU] [mittel] Linux Kernel: Mehrere Schwachstellen
→ No new info (linked only)
Tier A
Microsoft MSRC56d ago
CVE-2026-53306 tty: hvc_iucv: fix off-by-one in number of supported devices
→ No new info (linked only)
Tier C
VulDB58d ago
CVE-2026-53306 | Linux Kernel up to 7.0.9 tty hvc_iucv_table[] off-by-one
→ No new info (linked only)
Tier C
Linux Kernel CVEs58d ago
CVE-2026-53306: tty: hvc_iucv: fix off-by-one in number of supported devices
→ No new info (linked only)
CISA KEV❌ No
Actively exploited✅ Yes
Patch available
3d3b89e6ab93bdd0efd45828bda6b0e61cc46dff484357dff256c816d9466bda35eb765685e4dc8611207e42a332eb8bbcb9fe74df9edd2a807c5607fed8b8f33a46db0ee2efdb000f4f630c86ed8ca4a76511bc654819425d3b15e77b523d7f9d81f0643104a3f40feb107f77d7116ad9bf6c210ab7babff1dc8e72de9aabe5d96767a4e97219ac26b79fe5f2a880e802ad12d1e38039d1334fb1475d0f524105.10.2585.15.2096.1.1756.6.1416.12.916.18.337.0.107.1
PublishedJun 26, 2026
Last enriched58d agov3
Trending Score45
Source articles9
Independent5
Info Completeness7/14
Missing: cvss, epss, cwe, kev, exploit, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

HIGHCVE-2026-46331EXP
net/sched: fix pedit partial COW leading to page cache corruption
Trending: 62
HIGHCVE-2026-53359EXP
KVM: x86: Fix shadow paging use-after-free due to unexpected role
Trending: 62
HIGHCVE-2026-64600EXP
xfs: resample the data fork mapping after cycling ILOCK
Trending: 54
HIGHCVE-2026-46242EXP
eventpoll: fix ep_remove struct eventpoll / struct file UAF
Trending: 49
HIGHCVE-2026-53366EXP
ipv4: account for fraggap on the paged allocation path
Trending: 48

Pin to Dashboard

Verification

State: verified
Confidence: 0%

Vulnerability Timeline

CVE Published
Jun 26, 2026
Discovered by ZDM
Jun 26, 2026
Updated: affectedVersions, cweIds
Jun 26, 2026
Actively Exploited
Jun 26, 2026
Patch Available
Jun 26, 2026
Updated: description, affectedVersions, severity, activelyExploited
Jun 26, 2026

Version History

v3
Last enriched 58d ago
v3Tier C58d ago

Updated description with critical severity, added affected version 7.0.9, and noted that no exploit is available.

descriptionaffectedVersionsseverityactivelyExploited
via VulDB
v2Tier C58d ago

Updated description with more technical detail, added affected version 2.6.29, changed severity to HIGH, added CWE-119, and marked exploit available and actively exploited.

affectedVersionscweIds
via Linux Kernel CVEs
v158d ago

Initial creation