CVE-2026-43249: linux kernel from 4.14.308 (inclusive), before 6.12.75 (exclusive), from 6.13 (inclusive), before 6.18.16 (exclusive)…

Affected technology

linux kernel · from 4.14.308 (inclusive), before 6.12.75 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.16 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.6 (exclusive)
linux

Linux · c15fe55d14b3b4ded5af2a3260877460a6ffb8ad to before 480aa6ffd4ac7036eea042047d0cca71bc2074bb, c15fe55d14b3b4ded5af2a3260877460a6ffb8ad to before a5d00dff97118a32fcf5fec7a4c3f864c4620c4e, c15fe55d14b3b4ded5af2a3260877460a6ffb8ad to before 59e7707492576bdbfa8c1dbe7d90791df31e4773, c15fe55d14b3b4ded5af2a3260877460a6ffb8ad to before bf841d43f7a33d75675ba7f4e214ac1c67913065, c15fe55d14b3b4ded5af2a3260877460a6ffb8ad to before ce8ded2e61f47747e31eeefb44dc24a2160a7e32, be03c4fe72384366fd4077a70966bd3b8fc49013, 1ab4de11232e83b875b071aa44d1155634ca8a1e, 7cc9dbae8a5f73bd555130384ea256018d28f283, 3e0359f151ac151abe3fa71040e450ed69cb824b, 8d3fc907d060c4fb33203e616a395a22083b6566, 4f0e9244770f5b75a16d8c0929063cd336926764, 5f6a8974e9ef317fe63f88bab1f33070195dd147, 4.14.308 to before 4.15, 4.19.276 to before 4.20, 5.4.235 to before 5.5, 5.10.173 to before 5.11, 5.15.100 to before 5.16, 6.1.18 to before 6.2, 6.2.5 to before 6.3
Linux

Linux · 6.3
Linux

Component: Not specified by the source
File: net/9p/trans_xen.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.