CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2026-43139: linux kernel from 2.6.19 (inclusive), before 5.10.252 (exclusive), from 5.11 (inclusive), before 5.15.202 (exclusive)…

CVE-2026-43139. CVSS 3.1 base score 8.6 (HIGH, Source advisory). EPSS 0.00536 (percentile 0.43892), scored 15-Oct-2026.

Affected technology

linux kernel · from 2.6.19 (inclusive), before 5.10.252 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.202 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.165 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.128 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.75 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.16 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.6 (exclusive)
linux

linux kernel · 7.0 · update rc1
linux

Linux · a1e59abf824969554b90facd44a4ab16e265afa4 to before 4f28141786e1fe884ce42a5197ba9beed540f0ea, a1e59abf824969554b90facd44a4ab16e265afa4 to before 6535867673bf301d52aa00593a4d1d18cc3922fa, a1e59abf824969554b90facd44a4ab16e265afa4 to before eb2ee15290af14c60b45cf2b73f5687d1d077d9b, a1e59abf824969554b90facd44a4ab16e265afa4 to before 719918fc88df6da023dfff370cd965151a5afd7f, a1e59abf824969554b90facd44a4ab16e265afa4 to before dc0abce055134cb83b0d981d31ceb20dda419787, a1e59abf824969554b90facd44a4ab16e265afa4 to before c7221e7bd8fc2ef38a0b27be580d9d202281306b, a1e59abf824969554b90facd44a4ab16e265afa4 to before 3dcd1664ac15eee6a690daec7c4ffc59190406f7, a1e59abf824969554b90facd44a4ab16e265afa4 to before 1799d8abeabc68ec05679292aaf6cba93b343c05
Linux

Linux · 2.6.19
Linux

Component: Not specified by the source
File: net/ipv6/xfrm6_policy.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.6/10) rates confidentiality and integrity impact as low; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-908
CCR priority
34.5 /100 (P4)
CVSS 3.1
8.6 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H · Source advisory
EPSS
0.00536 · percentile 0.43892 · 2026-10-15
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-43139.html