CVE-2026-43407: linux kernel 2.6.34; +1 more affected products

Affected technology

linux kernel · from 2.6.34.1 (inclusive), before 5.10.253 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.203 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.167 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.130 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.78 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.19 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.9 (exclusive)
linux

linux kernel · 2.6.34
linux

linux kernel · 2.6.34 · update rc2
linux

linux kernel · 2.6.34 · update rc3
linux

linux kernel · 2.6.34 · update rc4
linux

linux kernel · 2.6.34 · update rc5
linux

linux kernel · 2.6.34 · update rc6
linux

linux kernel · 2.6.34 · update rc7
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

Linux · 4e7a5dcd1bbab6560fbc8ada29a840e7a20ed7bc to before ea080b21092590122c3f971cf588932cdbf47847, 4e7a5dcd1bbab6560fbc8ada29a840e7a20ed7bc to before edc678e5cd11730a2834b43071d8923f05bc334d, 4e7a5dcd1bbab6560fbc8ada29a840e7a20ed7bc to before 6cee34d6669fe176b4259131adb1a145c939b472, 4e7a5dcd1bbab6560fbc8ada29a840e7a20ed7bc to before 8bb87547e92dcf0928ed763c60e0ac8d733c3656, 4e7a5dcd1bbab6560fbc8ada29a840e7a20ed7bc to before ed024d2f4c79c0eb2464df0fb640610ac301f9a0, 4e7a5dcd1bbab6560fbc8ada29a840e7a20ed7bc to before f9da5c1bbac5c8e33259fe00ed7347438fffa969, 4e7a5dcd1bbab6560fbc8ada29a840e7a20ed7bc to before 9f9e2297f45fc2d2524eb104c289d69ddef95665, 4e7a5dcd1bbab6560fbc8ada29a840e7a20ed7bc to before b282c43ed156ae15ea76748fc15cd5c39dc9ab72
Linux

Linux · 2.6.34
Linux

Component: Not specified by the source
File: net/ceph/auth.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.