CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2026-43334: linux kernel from 3.3 (inclusive), before 5.10.253 (exclusive), from 5.11 (inclusive), before 5.15.203 (exclusive)…

CVE-2026-43334. CVSS 3.1 base score 8.8 (HIGH, Source advisory). EPSS 0.00252 (percentile 0.15537), scored 15-Oct-2026.

Affected technology

linux kernel · from 3.3 (inclusive), before 5.10.253 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.203 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.168 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.134 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.81 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.22 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.12 (exclusive)
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

linux kernel · 7.0 · update rc6
linux

Linux · 2b64d153a0cc9d2b60e47be013cde8490f16e0a5 to before 425a22c5373d4e1b46492ab869074ebeeade61f3, 2b64d153a0cc9d2b60e47be013cde8490f16e0a5 to before 7ab69426e7ecbd18a222ee2ec87ca612d30197d7, 2b64d153a0cc9d2b60e47be013cde8490f16e0a5 to before 01bb4045d2306c266178f49ce0c3576d237a3040, 2b64d153a0cc9d2b60e47be013cde8490f16e0a5 to before 91649c02c1baaa18cedf7fb425fa1f0f852c8183, 2b64d153a0cc9d2b60e47be013cde8490f16e0a5 to before c8ff0ca6508535bccabd81c5c9dcc63de8a3d4fb, 2b64d153a0cc9d2b60e47be013cde8490f16e0a5 to before fa14e0e19820b1bbdb42185c9c4efa950bcffef9, 2b64d153a0cc9d2b60e47be013cde8490f16e0a5 to before ec17efb1ef91506cfd17a77692eaf4bbacb520ea, 2b64d153a0cc9d2b60e47be013cde8490f16e0a5 to before d05111bfe37bfd8bd4d2dfe6675d6bdeef43f7c7
Linux

Linux · 3.3
Linux

Component: Not specified by the source
File: net/bluetooth/smp.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CCR priority
35.3 /100 (P4)
CVSS 3.1
8.8 /10 · CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS
0.00252 · percentile 0.15537 · 2026-10-15
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-43334.html