Get real-time updates on Telegram
CVE-2026-43094: linux kernel 6.18; +2 more affected products
CVE-2026-43094. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00162 (percentile 0.0506), scored 14-Oct-2026.
Affected technology
linux kernel · from 6.1.158 (inclusive), before 6.2 (exclusive)
linux
linux kernel · from 6.6.114 (inclusive), before 6.6.136 (exclusive)
linux
linux kernel · from 6.12.55 (inclusive), before 6.12.83 (exclusive)
linux
linux kernel · from 6.17.5 (inclusive), before 6.18 (exclusive)
linux
linux kernel · from 6.18.1 (inclusive), before 6.18.24 (exclusive)
linux
linux kernel · from 6.19 (inclusive), before 6.19.14 (exclusive)
linux
linux kernel · 6.18
linux
linux kernel · 6.18 · update rc2
linux
linux kernel · 6.18 · update rc3
linux
linux kernel · 6.18 · update rc4
linux
linux kernel · 6.18 · update rc5
linux
linux kernel · 6.18 · update rc6
linux
linux kernel · 6.18 · update rc7
linux
linux kernel · 7.0 · update rc1
linux
linux kernel · 7.0 · update rc2
linux
linux kernel · 7.0 · update rc3
linux
linux kernel · 7.0 · update rc4
linux
linux kernel · 7.0 · update rc5
linux
linux kernel · 7.0 · update rc6
linux
linux kernel · 7.0 · update rc7
linux
Linux · 871ac1cd4ce4804defcb428cbb003fd84c415ff4 to before 376d74ea03589914fbe2dedcbebf418396c04fd0, 2e0aab9ddaf1428602c78f12064cd1e6ffcc4d18 to before d8a747057a17ffc79e31df1abb11d05e1669d8e5, bf580112ed61736c2645a893413a04732505d4b1 to before 2270ebab53128fb73c4a70a292be09094074737f, a7075f501bd33c93570af759b6f4302ef0175168 to before 4db7b61ec1d1b2b67c0881b62fc4f9583bc21484, a7075f501bd33c93570af759b6f4302ef0175168 to before 1455ff8809843e6e83f1f5b5c0bcc2224c99a3cb, a7075f501bd33c93570af759b6f4302ef0175168 to before 4821d563cd7f251ae728be1a6d04af82a294a5b9, a376e29b1b196dc90b50df7e5e3947e3026300c4, 6.1.158 to before 6.1.175, 6.6.114 to before 6.6.136, 6.12.55 to before 6.12.83, 6.17.5 to before 6.18
Linux
Linux · 6.18
Linux
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens
Component: Not specified by the source
Function: pointer
File: drivers/net/ethernet/intel/ixgbevf/vf.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-476
- CCR priority
- 22.0 /100 (P4)
- CVSS 3.1
- 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
- EPSS
- 0.00162 · percentile 0.0506 · 2026-10-14
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-43094.html