CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2026-43037: linux kernel from 2.6.22 (inclusive), before 5.10.253 (exclusive), from 5.11 (inclusive), before 5.15.203 (exclusive)…

CVE-2026-43037. CVSS 3.1 base score 9.8 (CRITICAL, Source advisory). EPSS 0.00563 (percentile 0.45563), scored 15-Oct-2026.

Affected technology

linux kernel · from 2.6.22 (inclusive), before 5.10.253 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.203 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.168 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.134 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.81 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.22 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.12 (exclusive)
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

linux kernel · 7.0 · update rc6
linux

Linux · c4d3efafcc933fd2ffd169d7dc4f980393a13796 to before ea9f65b27c8404e164848ebff1443310fd187629, c4d3efafcc933fd2ffd169d7dc4f980393a13796 to before d6621f60192fe10c047a4487be42a6f4c150707f, c4d3efafcc933fd2ffd169d7dc4f980393a13796 to before 2cc6e3b0fe0f0242d1f530a93a4924f48ab85ba5, c4d3efafcc933fd2ffd169d7dc4f980393a13796 to before a0c4ce9900a108eaf55d0f3b399cb55999647d39, c4d3efafcc933fd2ffd169d7dc4f980393a13796 to before 1063515ce15ff31065c4e7f8265f4c2fd3c54876, c4d3efafcc933fd2ffd169d7dc4f980393a13796 to before 590f622669b97eaf7b57a1de7b0a6e68c5d8b2c3, c4d3efafcc933fd2ffd169d7dc4f980393a13796 to before 4a622658f384b03560834cbe8ffcfe69a278f7c8, c4d3efafcc933fd2ffd169d7dc4f980393a13796 to before 2edfa31769a4add828a7e604b21cb82aaaa05925
Linux

Linux · 2.6.22
Linux

NVIDIA for RHEL 10 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 10 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 10.0 Extended Update Support · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 7 Extended Lifecycle Support · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8.8 Telecommunications Update Service · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9.6 Extended Update Support · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Container Platform 4.12 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Container Platform 4.13 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Container Platform 4.14 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Container Platform 4.15 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Container Platform 4.16 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Container Platform 4.17 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Container Platform 4.18 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Container Platform 4.19 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Container Platform 4.20 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Container Platform 4.21 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Container Platform 4.22 · Exact affected versions not specified by the source
Red Hat

Component: Not specified by the source
File: net/ipv6/ip6_tunnel.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-787, CWE-843
CCR priority
39.3 /100 (P4)
CVSS 3.1
9.8 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS
0.00563 · percentile 0.45563 · 2026-10-15
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-43037.html