CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2026-43501: linux kernel from 5.7 (inclusive), before 5.10.258 (exclusive), from 5.11 (inclusive), before 5.15.209 (exclusive)…

CVE-2026-43501. CVSS 3.1 base score 9.8 (CRITICAL, Source advisory). EPSS 0.0099 (percentile 0.61731), scored 14-Oct-2026.

Affected technology

linux kernel · from 5.7 (inclusive), before 5.10.258 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.209 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.175 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.140 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.86 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.27 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.4 (exclusive)
linux

linux kernel · 7.1 · update rc1
linux

Linux · 8610c7c6e3bd647ff98d21c8bc0580e77bc2f8b3 to before bde199c72d319a4e207f88daabc888317504e2fb, 8610c7c6e3bd647ff98d21c8bc0580e77bc2f8b3 to before be1fa0aa9b4fdd5a8b7a61ba520a690a68391e6e, 8610c7c6e3bd647ff98d21c8bc0580e77bc2f8b3 to before 0a9e8053f1f8a8e1bfc1dd61ffe67be6c1180402, 8610c7c6e3bd647ff98d21c8bc0580e77bc2f8b3 to before 8e8be63465a5e80394c70324603dfea1bfdad48f, 8610c7c6e3bd647ff98d21c8bc0580e77bc2f8b3 to before 4babc2d9fda2df43823b85d08a0180b68f1b0854, 8610c7c6e3bd647ff98d21c8bc0580e77bc2f8b3 to before c261d07a80576dc8ccf394ef8f074f8c67a06b37, 8610c7c6e3bd647ff98d21c8bc0580e77bc2f8b3 to before 7398ebefbfd4f8a31d4f665a4213302fa995494b, 8610c7c6e3bd647ff98d21c8bc0580e77bc2f8b3 to before 9e6bf146b55999a095bb14f73a843942456d1adc
Linux

Linux · 5.7
Linux

Red Hat Enterprise Linux 10 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 10.0 Extended Update Support · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9.6 Extended Update Support · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 6 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 7 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8 · Exact affected versions not specified by the source
Red Hat

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/ipv6/exthdrs.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-131, CWE-787
CCR priority
39.4 /100 (P4)
CVSS 3.1
9.8 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS
0.0099 · percentile 0.61731 · 2026-10-14
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-43501.html