Get real-time updates on Telegram
CVE-2026-43187: linux kernel 2.6.12; +1 more affected products
CVE-2026-43187. CVSS 3.1 base score 8.8 (HIGH, Source advisory). EPSS 0.00678 (percentile 0.51315), scored 15-Oct-2026.
Affected technology
linux kernel · from 2.6.12.1 (inclusive), before 5.10.252 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.202 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.165 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.128 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.75 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.16 (exclusive)
linux
linux kernel · from 6.19 (inclusive), before 6.19.6 (exclusive)
linux
linux kernel · 2.6.12
linux
linux kernel · 2.6.12 · update rc2
linux
linux kernel · 2.6.12 · update rc3
linux
linux kernel · 2.6.12 · update rc4
linux
linux kernel · 2.6.12 · update rc5
linux
Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f3c0d1fc1eadbb4adbee5ab7757d41d35f48325b, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before aa9083d97e2157da3c6fb45ddb1a97af7f188f7f, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a631899025d47ea1aa6464d76db5b4d3b6d196fd, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ffaf5c99d0f862db021fb1af8b813c1416b1beb2, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before e1b8c6452ee99a30e188a88f3f3f804fb1c6004a, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f31a8334e1c54b126fcecf98645a49b6bc5ad399, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 479b05fc3ee272090f671b06a41f3da8aa78eece, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6f13c1d2a6271c2e73226864a0e83de2770b6f34
Linux
Linux · 2.6.12
Linux
Component: Not specified by the source
File: fs/xfs/libxfs/xfs_attr_leaf.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-191
- CCR priority
- 35.4 /100 (P4)
- CVSS 3.1
- 8.8 /10 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00678 · percentile 0.51315 · 2026-10-15
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-16 16:55:38.548135+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-43187.html