P4Verified

CVE-2026-43492: linux kernel from 4.4 (inclusive), before 5.10.259 (exclusive), from 5.11 (inclusive), before 5.15.210 (exclusive)…

CVE-2026-43492. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00152 (percentile 0.03937), scored 14-Oct-2026.

Affected technology

linux kernel · from 4.4 (inclusive), before 5.10.259 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.210 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.176 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.140 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.88 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.30 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.7 (exclusive)
linux

Linux · 2d4d1eea540b27c72488fd1914674c42473d53df to before a1793a48881ec8d26e9c79b0ee65753f1c6846a4, 2d4d1eea540b27c72488fd1914674c42473d53df to before 1abd50fc3cfa16fc2074a3c8c2729c50fd9d7043, 2d4d1eea540b27c72488fd1914674c42473d53df to before 6d63615c796c085b4984e3031b9fa77fffb47360, 2d4d1eea540b27c72488fd1914674c42473d53df to before 2aa77a18dc7f2670497fe3ee5acbeda0b57659e5, 2d4d1eea540b27c72488fd1914674c42473d53df to before 26d3a97ad46c7a9226ec04d4bf35bd4998a97d16, 2d4d1eea540b27c72488fd1914674c42473d53df to before 8637dfb4c1d8a7026ef681f2477c6de8b71c4003, 2d4d1eea540b27c72488fd1914674c42473d53df to before 30e513e755bb381afce6fb57cdc8694136193f22, 2d4d1eea540b27c72488fd1914674c42473d53df to before 8c2f1288250a90a4b5cabed5d888d7e3aeed4035
Linux

Linux · 4.4
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: lib/crypto/mpi/mpicoder.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 15-Oct-2026 09:20 UTC

CWE: CWE-190
CCR priority: 22.0 /100 (P4)
CVSS 3.1: 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS: 0.00152 · percentile 0.03937 · 2026-10-14
KEV: no

Provenance

FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-43492.html