P4Verified

CVE-2026-43190: linux kernel 2.6.12; +1 more affected products

CVE-2026-43190. CVSS 3.1 base score 8.2 (HIGH, Source advisory). EPSS 0.00463 (percentile 0.3863), scored 15-Oct-2026.

Affected technology

linux kernel · from 2.6.12.1 (inclusive), before 5.10.252 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.202 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.165 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.128 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.75 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.16 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.6 (exclusive)
linux

linux kernel · 2.6.12
linux

linux kernel · 2.6.12 · update rc2
linux

linux kernel · 2.6.12 · update rc3
linux

linux kernel · 2.6.12 · update rc4
linux

linux kernel · 2.6.12 · update rc5
linux

linux kernel · 2.6.12 · update rc6
linux

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f895191dc32c53eaf443b6443fe40945b2f92287, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before cd5beda7e0e32865e214f28034bb92c1cecff885, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before eaedc0bc18be46fe7f58170e967959a932c4f824, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 07a9b32eaae792ff7d0fcac14d8920c937c0a9c3, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8b300f726640c48c3edfe9c453334dd801f4b74e, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 5e13d0a37666955b6cfddc0f73cb40ed645b8a05, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f6c412dcfd76b0516d51aa847d8f4c7b70381b09, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 735ee8582da3d239eb0c7a53adca61b79fb228b3
Linux

Linux · 2.6.12
Linux

Component: Not specified by the source
File: net/netfilter/xt_tcpmss.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.2/10) rates confidentiality impact as low; integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 16-Oct-2026 16:57 UTC

CWE: CWE-125
CCR priority: 32.9 /100 (P4)
CVSS 3.1: 8.2 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H · Source advisory
EPSS: 0.00463 · percentile 0.3863 · 2026-10-15
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-16 16:55:38.548135+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-43190.html