CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2026-43233: linux kernel 4.15; +1 more affected products

CVE-2026-43233. CVSS 3.1 base score 8.2 (HIGH, Source advisory). EPSS 0.00463 (percentile 0.3863), scored 15-Oct-2026.

Affected technology

linux kernel · from 4.15.1 (inclusive), before 5.10.252 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.202 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.165 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.128 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.75 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.16 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.6 (exclusive)
linux

linux kernel · 4.15
linux

linux kernel · 4.15 · update rc4
linux

linux kernel · 4.15 · update rc5
linux

linux kernel · 4.15 · update rc6
linux

linux kernel · 4.15 · update rc7
linux

linux kernel · 4.15 · update rc8
linux

linux kernel · 4.15 · update rc9
linux

linux kernel · 7.0 · update rc1
linux

Linux · ec8a8f3c31ddef0a7d9626c4b8a4baa30f3b80aa to before bcb50aa0b8f2b74a9fe5a1c7bee6f2657a288041, ec8a8f3c31ddef0a7d9626c4b8a4baa30f3b80aa to before 2a3aac4205e7d2f1aca2e3827de8cdd517d36c4a, ec8a8f3c31ddef0a7d9626c4b8a4baa30f3b80aa to before 81f2fc5b0d0cf4696146f00f837596d10b92dead, ec8a8f3c31ddef0a7d9626c4b8a4baa30f3b80aa to before 7ef82863d42261817a6394c6c881bd6757a70f16, ec8a8f3c31ddef0a7d9626c4b8a4baa30f3b80aa to before 53d32735d77ab56cc3fc7bd53a7d099418f19be1, ec8a8f3c31ddef0a7d9626c4b8a4baa30f3b80aa to before f0a83d0a4b7c127d32ac06d607a9214937716129, ec8a8f3c31ddef0a7d9626c4b8a4baa30f3b80aa to before 35f1943d242e1b9f0b6e91c0c93bfb293a9f8224, ec8a8f3c31ddef0a7d9626c4b8a4baa30f3b80aa to before baed0d9ba91d4f390da12d5039128ee897253d60
Linux

Linux · 4.15
Linux

Component: Not specified by the source
File: net/netfilter/nf_conntrack_h323_asn1.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.2/10) rates confidentiality impact as low; integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-125
CCR priority
32.9 /100 (P4)
CVSS 3.1
8.2 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H · Source advisory
EPSS
0.00463 · percentile 0.3863 · 2026-10-15
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-43233.html