CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2026-43496: linux kernel from 2.6.29 (inclusive), before 5.10.258 (exclusive), from 5.11 (inclusive), before 5.15.209 (exclusive)…

CVE-2026-43496. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00162 (percentile 0.05053), scored 14-Oct-2026.

Affected technology

linux kernel · from 2.6.29 (inclusive), before 5.10.258 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.209 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.175 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.140 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.88 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.30 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.7 (exclusive)
linux

linux kernel · 7.1 · update rc1
linux

linux kernel · 7.1 · update rc2
linux

Linux · 77be155cba4e163e8bba9fd27222a8b6189ec4f7 to before 03b0aaeba082ae981a0dfe96cdd03d02050537a1, 77be155cba4e163e8bba9fd27222a8b6189ec4f7 to before c7335f4dc0fa21f7015b910c6fc2f4d599732328, 77be155cba4e163e8bba9fd27222a8b6189ec4f7 to before 45cd83c5c470ba49fe261489c8358ad7b9df7c45, 77be155cba4e163e8bba9fd27222a8b6189ec4f7 to before 36aa34f42cb6842cf371f3a2d3e855d24fd57a50, 77be155cba4e163e8bba9fd27222a8b6189ec4f7 to before ce051eede433f876d322ac3550a36a3c6fc4c231, 77be155cba4e163e8bba9fd27222a8b6189ec4f7 to before 8d09618840b99ef00154d3e731ce9b11e096196d, 77be155cba4e163e8bba9fd27222a8b6189ec4f7 to before 587dcf970a525f543d8b5855d9f37a4ca97b76ef, 77be155cba4e163e8bba9fd27222a8b6189ec4f7 to before 458d5615272d3de535748342eb68ca492343048c
Linux

Linux · 2.6.29
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
File: net/sched/sch_red.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-476
CCR priority
22.0 /100 (P4)
CVSS 3.1
5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS
0.00162 · percentile 0.05053 · 2026-10-14
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-43496.html