CVE-2026-43080: linux kernel from 2.6.23 (inclusive), before 5.10.258 (exclusive), from 5.11 (inclusive), before 5.15.209 (exclusive)…

Affected technology

linux kernel · from 2.6.23 (inclusive), before 5.10.258 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.209 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.175 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.136 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.83 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.24 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.14 (exclusive)
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

linux kernel · 7.0 · update rc6
linux

linux kernel · 7.0 · update rc7
linux

Linux · 3557baabf28088f49bdf72a048fd33ab62e205b1 to before 02d787fd0922c71c0264449fe82d35983613e4e5, 3557baabf28088f49bdf72a048fd33ab62e205b1 to before c2994fd24997ed63d713c03313f863645adb4d6c, 3557baabf28088f49bdf72a048fd33ab62e205b1 to before a42452db035577e150ffd9adf98c56fef9fb9408, 3557baabf28088f49bdf72a048fd33ab62e205b1 to before 9ccce02d501335f59a02f26c878c5e095b16302f, 3557baabf28088f49bdf72a048fd33ab62e205b1 to before 77c1489398c85a844f90205f5e76fd6bc8bb4089, 3557baabf28088f49bdf72a048fd33ab62e205b1 to before 86534c97abd6365a9a021fd767a2023e63c44469, 3557baabf28088f49bdf72a048fd33ab62e205b1 to before f295fe86e22ff0a2ecebf05e30a387e5cf6f6ddc, 3557baabf28088f49bdf72a048fd33ab62e205b1 to before ebe560ea5f54134279356703e73b7f867c89db13
Linux

Linux · 2.6.23
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
File: net/l2tp/l2tp_core.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.