CYBER CODE RED

Get real-time updates on Telegram

P4

CVE-2026-43073: linux kernel 4.2; +1 more affected products

CVE-2026-43073. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00162 (percentile 0.05074), scored 20-Oct-2026.

Affected technology

linux kernel · from 4.2.1 (inclusive), before 6.12.83 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.24 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.14 (exclusive)
linux

linux kernel · from 7.0 (inclusive), before 7.0.1 (exclusive)
linux

linux kernel · 4.2
linux

Linux · 06917f753547e6bba8a5d17f79971d1c071a70dd to before 73c2dc2c14d6a2efa5dde469546a907482af07fe, 06917f753547e6bba8a5d17f79971d1c071a70dd to before 14b9194db4a28421a4dbe5d6e519efbaa7c5f3cd, 06917f753547e6bba8a5d17f79971d1c071a70dd to before c6d4e0599e7e73abc04e2488dfeb7940c4039660, 06917f753547e6bba8a5d17f79971d1c071a70dd to before d993e1723aa2a085aa0d72e70ea889031fc225b4, 06917f753547e6bba8a5d17f79971d1c071a70dd to before efea91ad1729ff1853d7418e4d3bc27d085e72d0, 06917f753547e6bba8a5d17f79971d1c071a70dd to before d187a86de793f84766ea40b9ade7ac60aabbb4fe
Linux

Linux · 4.2
Linux

Component: Not specified by the source
Function: This, was
File: arch/x86/include/asm/uaccess_64.h, arch/x86/lib/copy_user_uncached_64.S, arch/x86/lib/usercopy_64.c, drivers/infiniband/sw/rdmavt/qp.c, drivers/ntb/ntb_transport.c, tools/objtool/check.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CCR priority
22.0 /100 (P4)
CVSS 3.1
5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS
0.00162 · percentile 0.05074 · 2026-10-20
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-43073.html