Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.3
CVE-2026-53243: Linux GKE kernels could leak memory from uninitialized data
CVE-2026-53243 · published 4 months ago
Summary
The Linux kernel versions used in Google Kubernetes Engine (GKE) can unintentionally reveal parts of memory because a variable is used before it is set. This could allow an attacker to see internal information about the system. Updating the kernel to the latest patched release resolves the issue.
What to do
- Update debian linux to version 7.0.13-1.
- Update canonical linux-aws-7.0 to version 7.0.0-1012.12~24.04.1.
- Update canonical linux-hwe-7.0 to version 7.0.0-31.31~24.04.1.
- Update canonical linux-nvidia-7.0 to version 7.0.0-1018.18~24.04.1.
- Update canonical linux-riscv-7.0 to version 7.0.0-31.31.1~24.04.1.
- Update canonical linux to version 7.0.0-31.31.
- Update canonical linux-aws to version 7.0.0-1012.12.
- Update canonical linux-azure to version 7.0.0-1014.14.
- Update canonical linux-gcp to version 7.0.0-1011.11.
- Update canonical linux-gke to version 7.0.0-1006.7.
- Update canonical linux-ibm to version 7.0.0-1013.13.
- Update canonical linux-nvidia to version 7.0.0-1018.18.
- Update canonical linux-nvidia-bos to version 7.0.0-2018.18.
- Update canonical linux-oem-7.0 to version 7.0.0-1013.13.
- Update canonical linux-oracle to version 7.0.0-1011.11.
- Update canonical linux-raspi to version 7.0.0-1019.19.
- Update canonical linux-realtime to version 7.0.0-31.31.1.
- Update canonical linux-riscv to version 7.0.0-31.31.1.
- Update linux kernel to version 7.0.13.
- Update canonical linux-azure-fde to version 7.0.0-1013.13.
- Update linux linux_kernel to version 7.0.13 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
Showing 50 of 120. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-aws-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.14 | All versions |
| Debian:14 | debian | linux |
< 7.0.13-1 Fix: upgrade to 7.0.13-1
|
| – | linux | linux_kernel |
>= 7.0.10, < 7.0.13 7.1 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-7.0 |
< 7.0.0-31.31~24.04.1 Fix: upgrade to 7.0.0-31.31~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.14 | All versions |
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield | All versions |
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.14 | All versions |
| Ubuntu:26.04:LTS | canonical | linux |
< 7.0.0-31.31 Fix: upgrade to 7.0.0-31.31
|
| Ubuntu:26.04:LTS | canonical | linux-aws |
< 7.0.0-1012.12 Fix: upgrade to 7.0.0-1012.12
|
| Ubuntu:26.04:LTS | canonical | linux-azure |
< 7.0.0-1014.14 Fix: upgrade to 7.0.0-1014.14
|
| Ubuntu:26.04:LTS | canonical | linux-gcp |
< 7.0.0-1011.11 Fix: upgrade to 7.0.0-1011.11
|
| Ubuntu:26.04:LTS | canonical | linux-gke |
< 7.0.0-1006.7 Fix: upgrade to 7.0.0-1006.7
|
| Ubuntu:26.04:LTS | canonical | linux-nvidia |
< 7.0.0-1018.18 Fix: upgrade to 7.0.0-1018.18
|
| Ubuntu:26.04:LTS | canonical | linux-realtime |
< 7.0.0-31.31.1 Fix: upgrade to 7.0.0-31.31.1
|
| Ubuntu:26.04:LTS | canonical | linux-riscv |
< 7.0.0-31.31.1 Fix: upgrade to 7.0.0-31.31.1
|
| Ubuntu:24.04:LTS | canonical | linux-aws-7.0 |
< 7.0.0-1012.12~24.04.1 Fix: upgrade to 7.0.0-1012.12~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-7.0 |
< 7.0.0-1018.18~24.04.1 Fix: upgrade to 7.0.0-1018.18~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-riscv-7.0 |
< 7.0.0-31.31.1~24.04.1 Fix: upgrade to 7.0.0-31.31.1~24.04.1
|
| Ubuntu:26.04:LTS | canonical | linux-ibm |
< 7.0.0-1013.13 Fix: upgrade to 7.0.0-1013.13
|
| Ubuntu:26.04:LTS | canonical | linux-nvidia-bos |
< 7.0.0-2018.18 Fix: upgrade to 7.0.0-2018.18
|
| Ubuntu:26.04:LTS | canonical | linux-oem-7.0 |
< 7.0.0-1013.13 Fix: upgrade to 7.0.0-1013.13
|
| Ubuntu:26.04:LTS | canonical | linux-oracle |
< 7.0.0-1011.11 Fix: upgrade to 7.0.0-1011.11
|
| Ubuntu:26.04:LTS | canonical | linux-raspi |
< 7.0.0-1019.19 Fix: upgrade to 7.0.0-1019.19
|
| Linux | linux | kernel |
>= 7.0.10, < 7.0.13 Fix: upgrade to 7.0.13
|
| Ubuntu:26.04:LTS | canonical | linux-azure-fde |
< 7.0.0-1013.13 Fix: upgrade to 7.0.0-1013.13
|
Original advisory text
rseq: Fix using an uninitialized stack variable in rseq_exit_user_update()
In the Linux kernel, the following vulnerability has been resolved: rseq: Fix using an uninitialized stack variable in rseq_exit_user_update() There is an bug in which an uninitialized stack variable is used in rseq_exit_user_update() as reported by syzbot: BUG: KMSAN: kernel-infoleak in rseq_set_ids_get_csaddr include/linux/rseq_entry.h:502 [inline] The local variable: struct rseq_ids ids = { .cpu_id = task_cpu(t), .mm_cid = task_mm_cid(t), .node_id = cpu_to_node(ids.cpu_id), }; According to the C standard, the evaluation order of expressions in an initializer list is indeterminately sequenced. The compiler (Clang, in this KMSAN build) evaluates `cpu_to_node(ids.cpu_id)` *before* `ids.cpu_id` is initialized with `task_cpu(t)`. This is fixed by moving the assignment of ids.node_id outside the structure initialization.
References
- https://git.kernel.org/stable/c/6d99479799c69c3cb588fcda19c81d8f61d64ecd Third Party Advisory
- https://git.kernel.org/stable/c/e12d20a63b61aaf9de4772effccf42cc9a003e58 Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2026-53243 Vendor Advisory
- https://docs.bell-sw.com/security/cves/CVE-2026-53243 Vendor Advisory
- https://ubuntu.com/security/CVE-2026-53243 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-53243 Third Party Advisory
- https://git.kernel.org/linus/6d99479799c69c3cb588fcda19c81d8f61d64ecd Third Party Advisory
- https://ubuntu.com/security/notices/USN-8726-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8727-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8760-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8726-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8726-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8800-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8760-2 Vendor Advisory
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53243... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-53243 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://ubuntu.com/security/notices/USN-8726-4 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-908Use of Uninitialized Resource
Timeline
Published25 Jun 2026
Updated26 Oct 2026
First seen25 Jun 2026
Sources
CVE-2026-53243 · NVD
DEBIAN-CVE-2026-53243 · OSV
BELL-CVE-2026-53243 · OSV
UBUNTU-CVE-2026-53243 · OSV
CVE-2026-53243 · OSV
Track software like this
Free during beta