CVE-2026-43186: linux kernel from 5.15 (inclusive), before 5.15.202 (exclusive), from 5.16 (inclusive), before 6.1.165 (exclusive)…

Affected technology

linux kernel · from 5.15 (inclusive), before 5.15.202 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.165 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.128 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.75 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.16 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.6 (exclusive)
linux

Linux · 9ee11f0fff205b4b3df9750bff5e94f97c71b6a0 to before f4d9d4b8fd839719d564651671e24c62c545c23b, 9ee11f0fff205b4b3df9750bff5e94f97c71b6a0 to before fb3c662fafebc5b9d74417ed1de8759f6bb72143, 9ee11f0fff205b4b3df9750bff5e94f97c71b6a0 to before 632d233cf2e64a46865ae2c064ae3c9df7c8864f, 9ee11f0fff205b4b3df9750bff5e94f97c71b6a0 to before 0591d6509c2ff13f09ea2998434aba0c0472e978, 9ee11f0fff205b4b3df9750bff5e94f97c71b6a0 to before e90346a2f1e8917d5760a44a1f61c44e3b36d96b, 9ee11f0fff205b4b3df9750bff5e94f97c71b6a0 to before ea3632aefc04205436868541638e26f4a74d5637, 9ee11f0fff205b4b3df9750bff5e94f97c71b6a0 to before 6db8b56eed62baacaf37486e83378a72635c04cc
Linux

Linux · 5.15
Linux

Component: Not specified by the source
Function: to
File: include/net/ioam6.h, net/ipv6/exthdrs.c, net/ipv6/ioam6.c, net/ipv6/ioam6_iptunnel.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.