Get real-time updates on Telegram
CVE-2026-43494: linux kernel from 4.17 (inclusive), before 5.10.258 (exclusive), from 5.11 (inclusive), before 5.15.209 (exclusive)…
CVE-2026-43494. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00194 (percentile 0.08522), scored 15-Oct-2026.
Affected technology
linux kernel · from 4.17 (inclusive), before 5.10.258 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.209 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.175 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.141 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.91 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.33 (exclusive)
linux
linux kernel · from 6.19 (inclusive), before 7.0.10 (exclusive)
linux
linux kernel · 7.1 · update rc1
linux
linux kernel · 7.1 · update rc2
linux
linux kernel · 7.1 · update rc3
linux
Linux · 0cebaccef3acbdfbc2d85880a2efb765d2f4e2e3 to before c6e51512a784c4a7b86e1a044988696e3b3721fa, 0cebaccef3acbdfbc2d85880a2efb765d2f4e2e3 to before 03014551938a0887fa55f18ce49b70158a9c0113, 0cebaccef3acbdfbc2d85880a2efb765d2f4e2e3 to before d84ce1786ce40fdd3dd98db47aec5527817e1ef6, 0cebaccef3acbdfbc2d85880a2efb765d2f4e2e3 to before 9115669faedccdda100428e2d26fd0aac8c50799, 0cebaccef3acbdfbc2d85880a2efb765d2f4e2e3 to before 0bbbff00a15b1df2cac9014d6cf4b6890f473353, 0cebaccef3acbdfbc2d85880a2efb765d2f4e2e3 to before 640e37f58f991546a87540d067279c2c1fa9fe51, 0cebaccef3acbdfbc2d85880a2efb765d2f4e2e3 to before 290e833d1acb1093bc121fcdc97f5e6161157479, 0cebaccef3acbdfbc2d85880a2efb765d2f4e2e3 to before e174929793195e0cd6a4adb0cad731b39f9019b4
Linux
Linux · 4.17
Linux
Red Hat Enterprise Linux 10 · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 6 · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 7 · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 8 · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 9 · Exact affected versions not specified by the source
Red Hat
Component: Not specified by the source
File: net/rds/message.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-1341
- CCR priority
- 31.2 /100 (P4)
- CVSS 3.1
- 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00194 · percentile 0.08522 · 2026-10-15
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-16 16:55:38.548135+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-43494.html