CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2026-43063: linux kernel from 6.10 (inclusive), before 6.12.80 (exclusive), from 6.13 (inclusive), before 6.18.21 (exclusive)…

CVE-2026-43063. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00186 (percentile 0.07689), scored 15-Oct-2026.

Affected technology

linux kernel · from 6.10 (inclusive), before 6.12.80 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.21 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.11 (exclusive)
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

Linux · ae673f534a30976ce5e709c4535a59c12b786ef3 to before b5c5a50c2f513d4a13a6763564a07b470e69cc5a, ae673f534a30976ce5e709c4535a59c12b786ef3 to before a1a5df1038f0b3c560d204270373621a4e622808, ae673f534a30976ce5e709c4535a59c12b786ef3 to before 40082d08b638485cbaa543dc8087a3d1844d6f08, ae673f534a30976ce5e709c4535a59c12b786ef3 to before 70685c291ef82269180758130394ecdc4496b52c
Linux

Linux · 6.10
Linux

Component: Not specified by the source
File: fs/xfs/xfs_attr_item.c

Attack conditions (Source advisory, CVSS 3.1): Local · No privileges required · User interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CCR priority
31.2 /100 (P4)
CVSS 3.1
7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · Source advisory
EPSS
0.00186 · percentile 0.07689 · 2026-10-15
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-43063.html