Get real-time updates on Telegram
CVE-2026-43496: linux kernel from 2.6.29 (inclusive), before 5.10.258 (exclusive), from 5.11 (inclusive), before 5.15.209 (exclusive)…
CVE-2026-43496. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00162 (percentile 0.05053), scored 14-Oct-2026.
Affected technology
linux kernel · from 2.6.29 (inclusive), before 5.10.258 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.209 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.175 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.140 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.88 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.30 (exclusive)
linux
linux kernel · from 6.19 (inclusive), before 7.0.7 (exclusive)
linux
linux kernel · 7.1 · update rc1
linux
linux kernel · 7.1 · update rc2
linux
Linux · 77be155cba4e163e8bba9fd27222a8b6189ec4f7 to before 03b0aaeba082ae981a0dfe96cdd03d02050537a1, 77be155cba4e163e8bba9fd27222a8b6189ec4f7 to before c7335f4dc0fa21f7015b910c6fc2f4d599732328, 77be155cba4e163e8bba9fd27222a8b6189ec4f7 to before 45cd83c5c470ba49fe261489c8358ad7b9df7c45, 77be155cba4e163e8bba9fd27222a8b6189ec4f7 to before 36aa34f42cb6842cf371f3a2d3e855d24fd57a50, 77be155cba4e163e8bba9fd27222a8b6189ec4f7 to before ce051eede433f876d322ac3550a36a3c6fc4c231, 77be155cba4e163e8bba9fd27222a8b6189ec4f7 to before 8d09618840b99ef00154d3e731ce9b11e096196d, 77be155cba4e163e8bba9fd27222a8b6189ec4f7 to before 587dcf970a525f543d8b5855d9f37a4ca97b76ef, 77be155cba4e163e8bba9fd27222a8b6189ec4f7 to before 458d5615272d3de535748342eb68ca492343048c
Linux
Linux · 2.6.29
Linux
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens
Component: Not specified by the source
File: net/sched/sch_red.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-476
- CCR priority
- 22.0 /100 (P4)
- CVSS 3.1
- 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
- EPSS
- 0.00162 · percentile 0.05053 · 2026-10-14
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-43496.html