P4Verified

CVE-2026-43414: linux kernel 6.9; +1 more affected products

CVE-2026-43414. CVSS 3.1 base score 9.8 (CRITICAL, Source advisory). EPSS 0.0038 (percentile 0.30253), scored 14-Oct-2026.

Affected technology

linux kernel · from 5.15.154 (inclusive), before 5.16 (exclusive)
linux

linux kernel · from 6.1.84 (inclusive), before 6.2 (exclusive)
linux

linux kernel · from 6.6.24 (inclusive), before 6.7 (exclusive)
linux

linux kernel · from 6.7.12 (inclusive), before 6.8 (exclusive)
linux

linux kernel · from 6.8.3 (inclusive), before 6.9 (exclusive)
linux

linux kernel · from 6.9.1 (inclusive), before 6.19.9 (exclusive)
linux

linux kernel · 6.9
linux

linux kernel · 6.9 · update rc2
linux

linux kernel · 6.9 · update rc3
linux

linux kernel · 6.9 · update rc4
linux

linux kernel · 6.9 · update rc5
linux

linux kernel · 6.9 · update rc6
linux

linux kernel · 6.9 · update rc7
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

Linux · 4895009c4bb72f71f2e682f1e7d2c2d96e482087 to before 4097a2afe8acc6038b71aab825430f1403decf20, 4895009c4bb72f71f2e682f1e7d2c2d96e482087 to before d48ea85463f5b34f7b92ea0a13eddf1ab993da7b, 4895009c4bb72f71f2e682f1e7d2c2d96e482087 to before c0b7da13a04bd70ef6070bfb9ea85f582294560a, 7861213201838480dc222634c56fb6db113d010d, 3b9d72442adfbc9ddb0f76dd1b03977b3a578b16, ef23850940d9a52c39936d27254824ccf5e9b6bd, 6c6bf6cacf9461f8d301cfac4f9c175d80cbcc63, cd10dee1f07a782f5aa05703c55299ca86a85ee4, b03e626bd6d3f0684f56ee1890d70fc9ca991c04, 282877633b25d67021a34169c5b5519b1d4ef65e, f85af9f1aa5e2f53694a6cbe72010f754b5ff862, 9b43d2884b54d415caab48878b526dfe2ae9921b, 846fb9f112f618ec6ae181d8dae7961652574774, 5.15.154 to before 5.16, 6.1.84 to before 6.2, 6.6.24 to before 6.7, 6.7.12 to before 6.8, 6.8.3 to before 6.9
Linux

Linux · 6.9
Linux

Component: Not specified by the source
Function: is
File: drivers/scsi/qla2xxx/qla_iocb.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 15-Oct-2026 11:57 UTC

CWE: CWE-415
CCR priority: 39.3 /100 (P4)
CVSS 3.1: 9.8 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS: 0.0038 · percentile 0.30253 · 2026-10-14
KEV: no

Provenance

GitHub Advisory Database · Source record · observed 2026-10-15 12:39:55.759815+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-15 11:57:11.427822+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-43414.html