CVE-2026-43091: linux kernel from 4.9 (inclusive), before 6.6.136 (exclusive), from 6.7 (inclusive), before 6.12.83 (exclusive), from…

Affected technology

linux kernel · from 4.9 (inclusive), before 6.6.136 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.83 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.24 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.14 (exclusive)
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

linux kernel · 7.0 · update rc6
linux

linux kernel · 7.0 · update rc7
linux

Linux · e1e551bc56302b80ff930c966f9985095fb1b70d to before b66920a3348c0f63ba18365248fa21fbf0b3a937, e1e551bc56302b80ff930c966f9985095fb1b70d to before 438b1f668ad58f46ce699bb48e4698a7839e3f9e, e1e551bc56302b80ff930c966f9985095fb1b70d to before 3733fce2871c9bca9dd18a1a23b1432ea215a094, e1e551bc56302b80ff930c966f9985095fb1b70d to before 33a3149dd81a1e2f52b80ee1e0fc380b39f3d028, e1e551bc56302b80ff930c966f9985095fb1b70d to before 069daad4f2ae9c5c108131995529d5f02392c446
Linux

Linux · 4.9
Linux

Component: Not specified by the source
File: net/xfrm/xfrm_policy.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.