What is the CVSS score of EUVD-2026-38879?

EUVD-2026-38879 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of Linux are affected by EUVD-2026-38879?

A local privilege escalation vulnerability in Linux kernel versions 5.2 and later (CVE-2026-53011) allows network administrators with system access to escalate privileges to kernel-level code…. A patch is available.

How to fix or mitigate EUVD-2026-38879?

Within 24 hours: identify all systems running Linux kernels 5.2 through current versions, particularly those accessible to multiple network administrators; check your Linux distribution vendor's security advisories for patch availability and fixed versions. Within 7 days: deploy patches from your distribution provider (RHEL, Ubuntu, Debian, etc.) to non-production environments and validate traffic scheduling functionality remains operational. Within 30 days: complete production deployment and document the patched kernel versions across all systems.

Linux EUVD-2026-38879

| CVE-2026-53011 HIGH

Use After Free (CWE-416)

2026-06-24 Linux

GHSA-g35r-7cv7-8x5x

Linux Information Disclosure Memory Corruption Use After Free

7.8

CVSS 3.1 · Vendor: Linux

Severity by source

Vendor (Linux) PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from Vendor (Linux) · only source for this CVE.

CVSS VectorVendor: Linux

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jun 28, 2026 - 08:50 vuln.today

CVSS changed

Jun 28, 2026 - 08:22 NVD

7.8 (HIGH)

Patch available

Jun 24, 2026 - 18:02 EUVD

CVE Published

Jun 24, 2026 - 16:29 cve.org

HIGH 7.8

CVE Published

Jun 24, 2026 - 16:29 cve.org

UNKNOWN (no severity yet)

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

net/sched: taprio: fix use-after-free in advance_sched() on schedule switch

In advance_sched(), when should_change_schedules() returns true, switch_schedules() is called to promote the admin schedule to oper. switch_schedules() queues the old oper schedule for RCU freeing via call_rcu(), but 'next' still points into an entry of the old oper schedule. The subsequent 'next->end_time = end_time' and rcu_assign_pointer(q->current_entry, next) are use-after-free.

Fix this by selecting 'next' from the new oper schedule immediately after switch_schedules(), and using its pre-calculated end_time. setup_first_end_time() sets the first entry's end_time to base_time + interval when the schedule is installed, so the value is already correct.

The deleted 'end_time = sched_base_time(admin)' assignment was also harmful independently: it would overwrite the new first entry's pre-calculated end_time with just base_time.

AnalysisAI

Local privilege escalation and memory corruption in the Linux kernel's taprio traffic scheduler (net/sched) arises from a use-after-free in advance_sched() during an admin-to-oper schedule switch, affecting kernels from 5.2 through the fixed releases. After switch_schedules() queues the old oper schedule for RCU freeing, the 'next' pointer still references a freed entry that is then written to and published via rcu_assign_pointer(), letting a local user with network-configuration capability corrupt kernel memory for potential code execution. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Recommended ActionAI

Within 24 hours: identify all systems running Linux kernels 5.2 through current versions, particularly those accessible to multiple network administrators; check your Linux distribution vendor's security advisories for patch availability and fixed versions. …

Threat intelligence, references, and detailed analysis are available after sign-in.