CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2026-43067: linux kernel 6.1.167; +1 more affected products

CVE-2026-43067. CVSS 3.1 base score 9.8 (CRITICAL, Source advisory). EPSS 0.00721 (percentile 0.52961), scored 15-Oct-2026.

Affected technology

linux kernel · from 5.15.203 (inclusive), before 5.16 (exclusive)
linux

linux kernel · from 6.6.130 (inclusive), before 6.6.134 (exclusive)
linux

linux kernel · from 6.12.77 (inclusive), before 6.12.80 (exclusive)
linux

linux kernel · from 6.18.14 (inclusive), before 6.18.21 (exclusive)
linux

linux kernel · from 6.19.4 (inclusive), before 6.19.11 (exclusive)
linux

linux kernel · 6.1.167
linux

Linux · 9d89b9d55e25cb340c5b4b769876edc551b7a9ff to before f89bba144938921a2249237ad04a0183ff3f8930, 1b0edd6022a3f44ce87fea9959a9310f4628fbea to before 83170a05908b6cf2fb3235d3065bf613ff866f3c, 9eea2f57d11b30049ff996ac3eff6e0dc8089e5f to before 4bec4a498ce86314d470ae6144120461f2138c29, 34c803edc0b3365a42efcf9815acab63b4cf54e0 to before 12624c5b724a81e14e532972b40d863b0de3b7d1, 321ed8d559c951e71ad2d2d69a4cf0445644e865 to before 2a368ccddfc492a0aa951e2caef2985f20e96503, 4865c768b563deff1b6a6384e74a62f143427b42 to before bb81702370fad22c06ca12b6e1648754dbc37e0f, 16fce6b6c0b247258c6c217fce5a48abf50f6964, 5.15.203 to before 5.16
Linux

Linux · 6.1.167 to before 6.1.168, 6.6.130 to before 6.6.134, 6.12.77 to before 6.12.80, 6.18.14 to before 6.18.21, 6.19.4 to before 6.19.11
Linux

Component: Not specified by the source
File: fs/ext4/mballoc.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CCR priority
39.4 /100 (P4)
CVSS 3.1
9.8 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS
0.00721 · percentile 0.52961 · 2026-10-15
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-43067.html