Get real-time updates on Telegram
CVE-2026-43370: linux kernel from 4.17 (inclusive), before 5.10.253 (exclusive), from 5.11 (inclusive), before 5.15.203 (exclusive)…
CVE-2026-43370. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00126 (percentile 0.02055), scored 15-Oct-2026.
Affected technology
linux kernel · from 4.17 (inclusive), before 5.10.253 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.203 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.167 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.130 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.78 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.19 (exclusive)
linux
linux kernel · from 6.19 (inclusive), before 6.19.9 (exclusive)
linux
linux kernel · 7.0 · update rc1
linux
linux kernel · 7.0 · update rc2
linux
Linux · ede0dd86f45adf2b7083bb161f6bc81da5fe2bad to before ae87aea330c24f462fc7058ed543ba8bc6798447, ede0dd86f45adf2b7083bb161f6bc81da5fe2bad to before 46d309996bd9251792d7dafdbaf615cf202b4447, ede0dd86f45adf2b7083bb161f6bc81da5fe2bad to before e61e355cbe49e585097eee28c15b862bfb1c0668, ede0dd86f45adf2b7083bb161f6bc81da5fe2bad to before c658c1c85ec235b7ecfbf8dbfee385b1332088f4, ede0dd86f45adf2b7083bb161f6bc81da5fe2bad to before 904025fa8bba1d028adade33346372b4ac1a9249, ede0dd86f45adf2b7083bb161f6bc81da5fe2bad to before 7885eb335d8f9e9942925d57e300a85e3f82ded4, ede0dd86f45adf2b7083bb161f6bc81da5fe2bad to before 94b7782d0c8024f5b88454241c8d4777076c3786, ede0dd86f45adf2b7083bb161f6bc81da5fe2bad to before 2c1030f2e84885cc58bffef6af67d5b9d2e7098f
Linux
Linux · 4.17
Linux
Component: Not specified by the source
File: drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-416
- CCR priority
- 31.2 /100 (P4)
- CVSS 3.1
- 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00126 · percentile 0.02055 · 2026-10-15
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-16 16:55:38.548135+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-43370.html