Get real-time updates on Telegram
CVE-2026-43139: linux kernel from 2.6.19 (inclusive), before 5.10.252 (exclusive), from 5.11 (inclusive), before 5.15.202 (exclusive)…
CVE-2026-43139. CVSS 3.1 base score 8.6 (HIGH, Source advisory). EPSS 0.00536 (percentile 0.43892), scored 15-Oct-2026.
Affected technology
linux kernel · from 2.6.19 (inclusive), before 5.10.252 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.202 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.165 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.128 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.75 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.16 (exclusive)
linux
linux kernel · from 6.19 (inclusive), before 6.19.6 (exclusive)
linux
linux kernel · 7.0 · update rc1
linux
Linux · a1e59abf824969554b90facd44a4ab16e265afa4 to before 4f28141786e1fe884ce42a5197ba9beed540f0ea, a1e59abf824969554b90facd44a4ab16e265afa4 to before 6535867673bf301d52aa00593a4d1d18cc3922fa, a1e59abf824969554b90facd44a4ab16e265afa4 to before eb2ee15290af14c60b45cf2b73f5687d1d077d9b, a1e59abf824969554b90facd44a4ab16e265afa4 to before 719918fc88df6da023dfff370cd965151a5afd7f, a1e59abf824969554b90facd44a4ab16e265afa4 to before dc0abce055134cb83b0d981d31ceb20dda419787, a1e59abf824969554b90facd44a4ab16e265afa4 to before c7221e7bd8fc2ef38a0b27be580d9d202281306b, a1e59abf824969554b90facd44a4ab16e265afa4 to before 3dcd1664ac15eee6a690daec7c4ffc59190406f7, a1e59abf824969554b90facd44a4ab16e265afa4 to before 1799d8abeabc68ec05679292aaf6cba93b343c05
Linux
Linux · 2.6.19
Linux
Component: Not specified by the source
File: net/ipv6/xfrm6_policy.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 8.6/10) rates confidentiality and integrity impact as low; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-908
- CCR priority
- 34.5 /100 (P4)
- CVSS 3.1
- 8.6 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H · Source advisory
- EPSS
- 0.00536 · percentile 0.43892 · 2026-10-15
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-16 16:55:38.548135+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-43139.html