CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2026-43187: linux kernel 2.6.12; +1 more affected products

CVE-2026-43187. CVSS 3.1 base score 8.8 (HIGH, Source advisory). EPSS 0.00678 (percentile 0.51315), scored 15-Oct-2026.

Affected technology

linux kernel · from 2.6.12.1 (inclusive), before 5.10.252 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.202 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.165 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.128 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.75 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.16 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.6 (exclusive)
linux

linux kernel · 2.6.12
linux

linux kernel · 2.6.12 · update rc2
linux

linux kernel · 2.6.12 · update rc3
linux

linux kernel · 2.6.12 · update rc4
linux

linux kernel · 2.6.12 · update rc5
linux

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f3c0d1fc1eadbb4adbee5ab7757d41d35f48325b, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before aa9083d97e2157da3c6fb45ddb1a97af7f188f7f, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a631899025d47ea1aa6464d76db5b4d3b6d196fd, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ffaf5c99d0f862db021fb1af8b813c1416b1beb2, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before e1b8c6452ee99a30e188a88f3f3f804fb1c6004a, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f31a8334e1c54b126fcecf98645a49b6bc5ad399, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 479b05fc3ee272090f671b06a41f3da8aa78eece, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6f13c1d2a6271c2e73226864a0e83de2770b6f34
Linux

Linux · 2.6.12
Linux

Component: Not specified by the source
File: fs/xfs/libxfs/xfs_attr_leaf.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-191
CCR priority
35.4 /100 (P4)
CVSS 3.1
8.8 /10 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS
0.00678 · percentile 0.51315 · 2026-10-15
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-43187.html