P4Verified

CVE-2026-22979: linux kernel 6.9; +4 more affected products

CVE-2026-22979. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00139 (percentile 0.02878), scored 14-Oct-2026.

Affected technology

linux kernel · from 5.15.154 (inclusive), before 5.16 (exclusive)
linux

linux kernel · from 6.1.85 (inclusive), before 6.1.161 (exclusive)
linux

linux kernel · from 6.6.26 (inclusive), before 6.6.121 (exclusive)
linux

linux kernel · from 6.8.5 (inclusive), before 6.9 (exclusive)
linux

linux kernel · from 6.9.1 (inclusive), before 6.12.66 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.6 (exclusive)
linux

linux kernel · 6.9
linux

linux kernel · 6.9 · update rc3
linux

linux kernel · 6.9 · update rc4
linux

linux kernel · 6.9 · update rc5
linux

linux kernel · 6.9 · update rc6
linux

linux kernel · 6.9 · update rc7
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

Linux · 2eeab8c47c3c0276e0746bc382f405c9a236a5ad to before 0b27828ebd1ed3107d7929c3737adbe862e99e74, fc126c1d51e9552eacd2d717b9ffe9262a8a4cd6 to before 88bea149db2057112af3aaf63534b24fab5858ab, ed4cccef64c1d0d5b91e69f7a8a6697c3a865486 to before 3264881431e308b9c72cb8a0159d57a56d67dd79, ed4cccef64c1d0d5b91e69f7a8a6697c3a865486 to before c114a32a2e70b82d447f409f7ffcfa3058f9d5bd, ed4cccef64c1d0d5b91e69f7a8a6697c3a865486 to before 238e03d0466239410b72294b79494e43d4fabe77, d225b0ac96dc40d7e8ae2bc227eb2c56e130975f, 5b3b67f731296027cceb3efad881ae281213f86f, 6.1.85 to before 6.1.161, 6.6.26 to before 6.6.121, 5.15.154 to before 5.16, 6.8.5 to before 6.9
Linux

Linux · 6.9
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/core/skbuff.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 15-Oct-2026 09:20 UTC

CWE: CWE-401
CCR priority: 22.0 /100 (P4)
CVSS 3.1: 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS: 0.00139 · percentile 0.02878 · 2026-10-14
KEV: no

Provenance

FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-22979.html