P4Verified

CVE-2026-43133: linux kernel from 5.13 (inclusive), before 5.15.202 (exclusive), from 5.16 (inclusive), before 6.1.165 (exclusive)…

CVE-2026-43133. CVSS 3.1 base score 7.9 (HIGH, Source advisory). EPSS 0.00133 (percentile 0.02476), scored 15-Oct-2026.

Affected technology

linux kernel · from 5.13 (inclusive), before 5.15.202 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.165 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.128 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.75 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.16 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.6 (exclusive)
linux

Linux · cc3ed80ae69f454c3d904af9f65394a540099723 to before 10063e1251c1485034a018236080792ad083dcc5, cc3ed80ae69f454c3d904af9f65394a540099723 to before c3b7015000988ba35ecd5648f4b2283960f00543, cc3ed80ae69f454c3d904af9f65394a540099723 to before 3880e331b0b31d0d5d3702b124f6c93539cd478a, cc3ed80ae69f454c3d904af9f65394a540099723 to before fce2fd4a2ca05670a91015aacccf96a1c26268fd, cc3ed80ae69f454c3d904af9f65394a540099723 to before d464cf1ed900d47c85393d40b00017b6adfc2e6c, cc3ed80ae69f454c3d904af9f65394a540099723 to before 0004ecb798b30e90d7ebfe74efae2d9423315a64, cc3ed80ae69f454c3d904af9f65394a540099723 to before 127ccae2c185f62e6ecb4bf24f9cb307e9b9c619
Linux

Linux · 5.13
Linux

Red Hat Enterprise Linux 10 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 6 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 7 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Container Platform 4 · Exact affected versions not specified by the source
Red Hat

Component: Not specified by the source
File: arch/x86/kvm/svm/svm.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.9/10) rates confidentiality and integrity impact as low; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 16-Oct-2026 16:58 UTC

CWE: CWE-628
CCR priority: 31.6 /100 (P4)
CVSS 3.1: 7.9 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H · Source advisory
EPSS: 0.00133 · percentile 0.02476 · 2026-10-15
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-16 16:55:38.548135+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-43133.html