First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2026-53351

MediumCVSS 5.5/10Last modified Jul 22, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

riscv/ptrace: Use USER_REGSET_NOTE_TYPE for REGSET_CFI

Fixes a warning while dumping core:

[54983.546369][ C7] WARNING: [!note_name] fs/binfmt_elf.c:1771 at elf_core_dump+0x910/0xf68, CPU#7: abort01/31982

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

Vendor	Product	Versions
Linux	Linux	>= 2af7c9cf021c5dabe880b68e5cc22c618060d954, < 08200bef0983ffed039ab399df0cba8d900ce5fc; >= 2af7c9cf021c5dabe880b68e5cc22c618060d954, < e3573f739e3dadab57ec80488d07e05c8f6e82d3
Linux	Linux	7.0

References

Timeline

Published: Jul 1, 2026
Last modified: Jul 22, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-533524.7In the Linux kernel, the following vulnerability has been resolved: signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads() Wh CVE-2026-533535.5In the Linux kernel, the following vulnerability has been resolved: hsr: Remove WARN_ONCE() in hsr_addr_is_self(). syzbot reported the war CVE-2026-533548.8In the Linux kernel, the following vulnerability has been resolved: arm64: errata: Mitigate TLBI errata on various Arm CPUs A number of CP CVE-2026-533559.8In the Linux kernel, the following vulnerability has been resolved: net: rds: clear i_sends on setup unwind The RDS IB connection teardown CVE-2026-533567.8In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Fix phys BO pread/pwrite with offset sg_page() returns s CVE-2026-533578.0In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() CVE-2026-533588.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() CVE-2026-533598.8In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix shadow paging use-after-free due to unexpected role Comm CVE-2026-53366.8The DataPress (Dataverse Integration) WordPress plugin before 2.91 does not properly restrict access to its template rendering feature and e CVE-2026-533608.8In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use As per th CVE-2026-533617.1In the Linux kernel, the following vulnerability has been resolved: af_unix: Set gc_in_progress to true in unix_gc(). Igor Ushakov reporte CVE-2026-533627.8In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation path In __ip6_append

CVE-2026-53351: Medium severity, CVSS 5.5 | Vulnix