P4Verified

CVE-2026-43051: linux kernel from 3.3 (inclusive), before 5.10.253 (exclusive), from 5.11 (inclusive), before 5.15.203 (exclusive)…

CVE-2026-43051. CVSS 3.1 base score 8.1 (HIGH, Source advisory). EPSS 0.00255 (percentile 0.15937), scored 15-Oct-2026.

Affected technology

linux kernel · from 3.3 (inclusive), before 5.10.253 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.203 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.168 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.134 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.81 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.22 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.12 (exclusive)
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

Linux · 78761ff9bc4e944e0b4e5df1e7eedcfdbb1a9a1a to before d0ae84b3c9f3ea1a564eb1b7612113ca9fe8aada, 78761ff9bc4e944e0b4e5df1e7eedcfdbb1a9a1a to before 5b5b9730111808410e404ceac2fabd32eef92fbd, 78761ff9bc4e944e0b4e5df1e7eedcfdbb1a9a1a to before fa8901cb1f0b2113a342db93bd5684b59fe99dcf, 78761ff9bc4e944e0b4e5df1e7eedcfdbb1a9a1a to before 8bd690ac1242332c73cba10dacdad6c6642bbb94, 78761ff9bc4e944e0b4e5df1e7eedcfdbb1a9a1a to before 41026bcc0fdf82605205c27935ef719cbc07193b, 78761ff9bc4e944e0b4e5df1e7eedcfdbb1a9a1a to before c8dc23c97680eebefde06da5858aaef1b37cf75d, 78761ff9bc4e944e0b4e5df1e7eedcfdbb1a9a1a to before 3d78386b144453c47e81bf62dc3601b757f02d99, 78761ff9bc4e944e0b4e5df1e7eedcfdbb1a9a1a to before 2f1763f62909ccb6386ac50350fa0abbf5bb16a9
Linux

Linux · 3.3
Linux

Component: Not specified by the source
Function: processes
File: drivers/hid/wacom_wac.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 16-Oct-2026 16:58 UTC

CWE: CWE-125
CCR priority: 32.5 /100 (P4)
CVSS 3.1: 8.1 /10 · CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H · Source advisory
EPSS: 0.00255 · percentile 0.15937 · 2026-10-15
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-16 16:55:38.548135+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-43051.html