CVE-2026-43309: linux kernel 6.0; +1 more affected products

CVE-2026-43309. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.0016 (percentile 0.04792), scored 20-Oct-2026.

Affected technology

linux kernel · from 4.14.292 (inclusive), before 4.15 (exclusive)
linux

linux kernel · from 4.19.257 (inclusive), before 4.20 (exclusive)
linux

linux kernel · from 5.4.212 (inclusive), before 5.5 (exclusive)
linux

linux kernel · from 5.10.140 (inclusive), before 5.11 (exclusive)
linux

linux kernel · from 5.15.64 (inclusive), before 5.16 (exclusive)
linux

linux kernel · from 5.19.6 (inclusive), before 6.0 (exclusive)
linux

linux kernel · from 6.0.1 (inclusive), before 6.18.16 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.6 (exclusive)
linux

linux kernel · 6.0
linux

linux kernel · 6.0 · update rc3
linux

linux kernel · 6.0 · update rc4
linux

linux kernel · 6.0 · update rc5
linux

linux kernel · 6.0 · update rc6
linux

linux kernel · 6.0 · update rc7
linux

Linux · 0dd84b319352bb8ba64752d4e45396d8b13e6018 to before 63054027d95200b04f3cf624faa7817e0555d56a, 0dd84b319352bb8ba64752d4e45396d8b13e6018 to before 24783dd06de870d646c25207bae186f78195f912, 0dd84b319352bb8ba64752d4e45396d8b13e6018 to before 338378dfffbdbb8d37a18f0a0c0358812671f91e, 0dd84b319352bb8ba64752d4e45396d8b13e6018 to before cefcb9297fbdb6d94b61787b4f8d84f55b741470, 1678ca35b80a94d474fdc31e2497ce5d7ed52512, 690b5c90fd2d81fd1d2b6110fa36783232f6dce2, 8e7fb19f1a744fd34e982633ced756fee0498ef7, a5a58fab556bfe618b4c9719eb85712d78c6cb10, 661c01b2181d9413c799127f13143583b69f20fd, f42a9819ba84bed2e609a4dff56af37063dcabdc, 4.14.292 to before 4.15, 4.19.257 to before 4.20, 5.4.212 to before 5.5, 5.10.140 to before 5.11, 5.15.64 to before 5.16, 5.19.6 to before 5.20
Linux

Linux · 6.0
Linux

Component: Not specified by the source
File: drivers/md/md.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 21-Oct-2026 16:14 UTC

CCR priority: 22.0 /100 (P4)
CVSS 3.1: 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS: 0.0016 · percentile 0.04792 · 2026-10-20
KEV: no

Provenance

GitHub Advisory Database · Source record · observed 2026-10-21 16:14:50.830645+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-21 16:09:05.633125+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-43309.html