Get real-time updates on Telegram
CVE-2026-43022: linux kernel 6.1.120, 6.6.51, 6.8.9; +1 more affected products
CVE-2026-43022. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00107 (percentile 0.01099), scored 14-Oct-2026.
Affected technology
linux kernel · from 6.9 (inclusive), before 6.19.12 (exclusive)
linux
linux kernel · 6.1.120
linux
linux kernel · 6.6.51
linux
linux kernel · 6.8.9
linux
linux kernel · 7.0 · update rc1
linux
linux kernel · 7.0 · update rc2
linux
linux kernel · 7.0 · update rc3
linux
linux kernel · 7.0 · update rc4
linux
linux kernel · 7.0 · update rc5
linux
linux kernel · 7.0 · update rc6
linux
Linux · 505ea2b295929e7be2b4e1bc86ee31cb7862fb01 to before 5cfa4f537a056c91ac6c09bc3ab58a4455217df7, 505ea2b295929e7be2b4e1bc86ee31cb7862fb01 to before 0ad2ce230b38cd4b3f6732cc609e270461e626e5, 505ea2b295929e7be2b4e1bc86ee31cb7862fb01 to before 2969554bcfccb5c609f6b6cd4a014933f3a66dd0, f00f36db76eb8fd10d13e80e2590f23b5beaa54d, 1499f79995c7ee58e3bfeeff75f6d1b37dcda881, 357603f4d396d85fbf0045512efaf1d7f7394ed7, 6.1.120 to before 6.2, 6.6.51 to before 6.7, 6.8.9 to before 6.9
Linux
Linux · 6.9
Linux
Component: Not specified by the source
Function: to
File: net/bluetooth/hci_sync.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 22.0 /100 (P4)
- CVSS 3.1
- 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
- EPSS
- 0.00107 · percentile 0.01099 · 2026-10-14
- KEV
- no
Provenance
- GitHub Advisory Database · Source record · observed 2026-10-15 12:39:55.759815+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-15 11:57:11.427822+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-43022.html