P4Verified

CVE-2026-45841: linux kernel from 2.6.31 (inclusive), before 5.10.258 (exclusive), from 5.11 (inclusive), before 5.15.209 (exclusive)…

CVE-2026-45841. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00166 (percentile 0.05478), scored 14-Oct-2026.

Affected technology

linux kernel · from 2.6.31 (inclusive), before 5.10.258 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.209 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.175 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.141 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.91 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.33 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.10 (exclusive)
linux

Linux · 11eeef41d5f63c7d2f7fdfcc733eb7fb137cc384 to before cb833bbc1b3c51e08652d3c86298307c07d3f2db, 11eeef41d5f63c7d2f7fdfcc733eb7fb137cc384 to before 26900306a5a2c3e4f75c643a064525526bb6e5f3, 11eeef41d5f63c7d2f7fdfcc733eb7fb137cc384 to before 0694618cf3e9b120666e31f5f383a6e466d95a0d, 11eeef41d5f63c7d2f7fdfcc733eb7fb137cc384 to before 8def8fbd23f40e945febe913d04b731012ce0082, 11eeef41d5f63c7d2f7fdfcc733eb7fb137cc384 to before c55940895245d8ef658ab381248a28755218d625, 11eeef41d5f63c7d2f7fdfcc733eb7fb137cc384 to before fb965b1cfe92b28d28b5ebe3116b81dbef9f2d2f, 11eeef41d5f63c7d2f7fdfcc733eb7fb137cc384 to before 9a05e195618a6d474f2bcd5b6376d0ffc2f00366, 11eeef41d5f63c7d2f7fdfcc733eb7fb137cc384 to before 2195574dc6d9017d32ac346987e12659f931d932
Linux

Linux · 2.6.31
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/netfilter/nfnetlink_osf.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

A CAP_NET_ADMIN user can add such a fingerprint via nfnetlink; a subsequent matching TCP SYN divides by zero and panics the kernel. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high.

Published 15-Oct-2026 09:20 UTC

CWE: CWE-369
CCR priority: 22.0 /100 (P4)
CVSS 3.1: 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS: 0.00166 · percentile 0.05478 · 2026-10-14
KEV: no

Provenance

FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-45841.html