Get real-time updates on Telegram
CVE-2026-43198: linux kernel 2.6.12; +16 more affected products
CVE-2026-43198. CVSS 3.1 base score 9.8 (CRITICAL, Source advisory). EPSS 0.00298 (percentile 0.20988), scored 15-Oct-2026.
Affected technology
linux kernel · from 2.6.12.1 (inclusive), before 6.18.16 (exclusive)
linux
linux kernel · from 6.19 (inclusive), before 6.19.6 (exclusive)
linux
linux kernel · 2.6.12
linux
linux kernel · 2.6.12 · update rc2
linux
linux kernel · 2.6.12 · update rc3
linux
linux kernel · 2.6.12 · update rc4
linux
linux kernel · 2.6.12 · update rc5
linux
linux kernel · 7.0 · update rc1
linux
Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before aef4a9ae95d1bc4f7897065011e6261026719aeb, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before dad1fe7db6c6519138430ac8f5e589c18f83bfc9, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a7e761ba55efaa9c49e0afdd304bb78167af3429, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before cd644e6dc72eec8d9d988717ea1c54f8668ded69, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 9ed654e340f4c73bc6f0af2fbc90ac293e645ce0, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before fe89b2f05b854847784f91127319172945c1fadd, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7178e2a8027423b2af17ab95df73a749a5b72e5b, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 858d2a4f67ff69e645a43487ef7ea7f28f06deae
Linux
Linux · 2.6.12
Linux
Red Hat Enterprise Linux 10 · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 10.0 Extended Update Support · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 7 Extended Lifecycle Support · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 8 · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 8.8 Telecommunications Update Service · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 9 · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 9.6 Extended Update Support · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 6 · Exact affected versions not specified by the source
Red Hat
Component: Not specified by the source
File: include/net/inet_connection_sock.h, include/net/tcp.h, net/ipv4/syncookies.c, net/ipv4/tcp_fastopen.c, net/ipv4/tcp_ipv4.c, net/ipv4/tcp_minisocks.c, net/ipv6/tcp_ipv6.c, net/mptcp/subflow.c, net/smc/af_smc.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-362, CWE-821
- CCR priority
- 39.3 /100 (P4)
- CVSS 3.1
- 9.8 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00298 · percentile 0.20988 · 2026-10-15
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-16 16:55:38.548135+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-43198.html