Get real-time updates on Telegram
CVE-2026-43503: linux kernel from 3.9 (inclusive), before 5.10.257 (exclusive), from 5.11 (inclusive), before 5.15.208 (exclusive)…
CVE-2026-43503. CVSS 3.1 base score 8.8 (HIGH, Source advisory). EPSS 0.01987 (percentile 0.8022), scored 14-Oct-2026.
Affected technology
linux kernel · from 3.9 (inclusive), before 5.10.257 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.208 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.174 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.141 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.91 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.33 (exclusive)
linux
linux kernel · from 6.19 (inclusive), before 7.0.10 (exclusive)
linux
linux kernel · 7.1 · update rc1
linux
linux kernel · 7.1 · update rc2
linux
linux kernel · 7.1 · update rc3
linux
linux kernel · 7.1 · update rc4
linux
Linux · cef401de7be8c4e155c6746bfccf721a4fa5fab9 to before fbeab9555564a1b98e8582cd106dfe46c4606991, cef401de7be8c4e155c6746bfccf721a4fa5fab9 to before 179f1852bdedc300e373e807cc102cd81feff196, cef401de7be8c4e155c6746bfccf721a4fa5fab9 to before 12401fcfb01f53ccc63ab0a3246570fe8f3105ee, cef401de7be8c4e155c6746bfccf721a4fa5fab9 to before 989214c66884d70716d83dc1d0bf5e16287bf349, cef401de7be8c4e155c6746bfccf721a4fa5fab9 to before fc6eb39c55e97df2f94ad974b8a5bbcd019da2c8, cef401de7be8c4e155c6746bfccf721a4fa5fab9 to before ff375cc75f9167168db38e0464a482d5fbc8d81d, cef401de7be8c4e155c6746bfccf721a4fa5fab9 to before 9bc9d6d6967a2239aa57af2aa53554eddd640d20, cef401de7be8c4e155c6746bfccf721a4fa5fab9 to before 48f6a5356a33dd78e7144ae1faef95ffc990aae0
Linux
Linux · 3.9
Linux
NVIDIA for RHEL 10 · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 10 · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 10.0 Extended Update Support · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 8 · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 8.6 Telecommunications Update Service · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 8.8 Telecommunications Update Service · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 9 · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 9.4 Extended Update Support · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 9.6 Extended Update Support · Exact affected versions not specified by the source
Red Hat
Red Hat OpenShift Container Platform 4.12 · Exact affected versions not specified by the source
Red Hat
Red Hat OpenShift Container Platform 4.13 · Exact affected versions not specified by the source
Red Hat
Red Hat OpenShift Container Platform 4.15 · Exact affected versions not specified by the source
Red Hat
Red Hat OpenShift Container Platform 4.16 · Exact affected versions not specified by the source
Red Hat
Red Hat OpenShift Container Platform 4.18 · Exact affected versions not specified by the source
Red Hat
Red Hat OpenShift Container Platform 4.19 · Exact affected versions not specified by the source
Red Hat
Red Hat OpenShift Container Platform 4.20 · Exact affected versions not specified by the source
Red Hat
Red Hat OpenShift Container Platform 4.21 · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 6 · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 7 · Exact affected versions not specified by the source
Red Hat
Red Hat OpenShift Container Platform 4 · Exact affected versions not specified by the source
Red Hat
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens
Component: Not specified by the source
File: net/core/gro.c, net/core/skbuff.c, net/ipv4/tcp_output.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-664
- CCR priority
- 35.7 /100 (P4)
- CVSS 3.1
- 8.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H · Source advisory
- EPSS
- 0.01987 · percentile 0.8022 · 2026-10-14
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-43503.html