Get real-time updates on Telegram
CVE-2026-43067: linux kernel 6.1.167; +1 more affected products
CVE-2026-43067. CVSS 3.1 base score 9.8 (CRITICAL, Source advisory). EPSS 0.00721 (percentile 0.52961), scored 15-Oct-2026.
Affected technology
linux kernel · from 5.15.203 (inclusive), before 5.16 (exclusive)
linux
linux kernel · from 6.6.130 (inclusive), before 6.6.134 (exclusive)
linux
linux kernel · from 6.12.77 (inclusive), before 6.12.80 (exclusive)
linux
linux kernel · from 6.18.14 (inclusive), before 6.18.21 (exclusive)
linux
linux kernel · from 6.19.4 (inclusive), before 6.19.11 (exclusive)
linux
linux kernel · 6.1.167
linux
Linux · 9d89b9d55e25cb340c5b4b769876edc551b7a9ff to before f89bba144938921a2249237ad04a0183ff3f8930, 1b0edd6022a3f44ce87fea9959a9310f4628fbea to before 83170a05908b6cf2fb3235d3065bf613ff866f3c, 9eea2f57d11b30049ff996ac3eff6e0dc8089e5f to before 4bec4a498ce86314d470ae6144120461f2138c29, 34c803edc0b3365a42efcf9815acab63b4cf54e0 to before 12624c5b724a81e14e532972b40d863b0de3b7d1, 321ed8d559c951e71ad2d2d69a4cf0445644e865 to before 2a368ccddfc492a0aa951e2caef2985f20e96503, 4865c768b563deff1b6a6384e74a62f143427b42 to before bb81702370fad22c06ca12b6e1648754dbc37e0f, 16fce6b6c0b247258c6c217fce5a48abf50f6964, 5.15.203 to before 5.16
Linux
Linux · 6.1.167 to before 6.1.168, 6.6.130 to before 6.6.134, 6.12.77 to before 6.12.80, 6.18.14 to before 6.18.21, 6.19.4 to before 6.19.11
Linux
Component: Not specified by the source
File: fs/ext4/mballoc.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 39.4 /100 (P4)
- CVSS 3.1
- 9.8 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00721 · percentile 0.52961 · 2026-10-15
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-16 16:55:38.548135+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-43067.html