HIGHVulnerability
Verified
Global

CISA KEV: Linux Kernel — Linux Kernel Missing Initialization of a Variable Vulnerability

·Source: CISA KEV

Updated:

Executive Summary

Linux Kernel contains a missing initialization of a variable vulnerability that could allow for unintended modification of page-cache-backed data via failure to preserve the shared-fragment marker during socket buffer coalescing, causing ESP input processing to decrypt shared fragments in place. This vulnerability can be chained with CVE-2026-109618 and CVE-2026-109619 to implant PHP webshells and run commands as root.

Analysis

Linux Kernel contains a missing initialization of a variable vulnerability that could allow for unintended modification of page-cache-backed data via failure to preserve the shared-fragment marker during socket buffer coalescing, causing ESP input processing to decrypt shared fragments in place. This vulnerability can be chained with CVE-2026-109618 and CVE-2026-109619 to implant PHP webshells and run commands as root. Added to CISA Known Exploited Vulnerabilities catalog on 2026-10-28. Remediation due: 2026-10-31.

Indicators of Compromise (3)

CVE (3)
CVE-2026-109618
NVDMITRE CVE
CVE-2026-109619
NVDMITRE CVE
CVE-2026-46300
NVDMITRE CVE
Source Attribution

Originally published by CISA KEV on Oct 28, 2026. Verified by: CISA.

Related Threats

LOWAi

Metasploit Wrap Up: Lot of summer shells and fit http profiles

This wrap-up brings a full-on shell parade. Thirteen shiny new modules landed, starting with a buffet of RCEs. WordPress WP2Shell, Ghost CMS, Joomla JCE, Langflow, OpenCATS, Pterodactyl Panel, SonicWall SMA1000, Ray Dashboard, a Pix-for-WooCommerce, and for those who like their exploits closer to the bare-metal, the Fragnesia Linux kernel LPE (CVE-2026-46300). Metasploit also got the glow-up of th

CVE-2026-46300CVE-2025-49132
Rapid7
CRITICALAi

Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-209-04.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.6 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). Siemens is preparing fix versions and recommend

CVE-2021-41617CVE-2023-28531
CISA Advisories
CRITICALApt

Impact of Linux Kernel vulnerabilities on B&amp;R products

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-174-06.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>B&amp;R is aware of publicly reported vulnerabilities affecting the Linux kernel versions shipped with the products listed as affected in the advisory. Successful local exploitation of these vulnerabilities could allow an attacker to

CVE-2026-31431CVE-2026-43284
CISA Advisories