5.5

CVE-2026-43034: linux

CVSS: 5.5v3.1MediumModified
AliasesUBUNTU-CVE-2026-43034DEBIAN-CVE-2026-43034CGA-5p7m-6h4c-hvfj
Published 01-05-2026Last modified 21-10-2026
Open JSON

Vulnerability summary

CVE-2026-43034 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.16% chance of exploitation in the next 30 days, higher than 4.8% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.16%
0%100%
Low · +0.04 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 11 · Related 12
OPENSUSE-SU-2026:21388-1SUSE-SU-2026:22521-1SUSE-SU-2026:22522-1SUSE-SU-2026:22665-1SUSE-SU-2026:22666-1SUSE-SU-2026:22742-1

Timeline

  1. 01-05-2026
    PublishedVulnerability first disclosed.
  2. 21-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: bnxt_en: set backing store type from query type bnxt_hwrm_func_backing_store_qcaps_v2() stores resp->type from the firmware response in ctxm->type and later uses that value to index fixed backing-store metadata arrays such as ctx_arr[] and bnxt_bstore_to_trace[]. ctxm->type is fixed by the current backing-store query type and matches the array index of ctx->ctx_arr. Set ctxm->type from the current loop variable instead of depending on resp->type. Also update the loop to advance type from next_valid_type in the for statement, which keeps the control flow simpler for non-valid and unchanged entries.

CVSS metrics

4 scores · 3 sources · 2 versions

EPSS trend

Probability

0.16%

Chance of exploitation in the next 30 days

Percentile

5%

Versus all other CVEs

30-day change

+0.04 pp

From 0.12% on 21-09-2026

21-09-202621-10-2026
EPSS score
0.16%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu132 products
  • linuxAll versions (No fix recorded)
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded)
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Chainguard5 products
  • linux-aws-6.12< 6.12.85-r2
  • linux-azure-6.12< 6.12.85-r2
  • linux-gcp-6.12< 6.12.85-r2
  • linux-qemu-6.12< 6.12.85-r2
  • linux-vmware-6.12< 6.12.85-r2
Linux2 products
  • linux≥ 6a4d0774f02d61f8c75ffe2e38a8553410fe52e9, < c66a27ca534580de1d28cf568f59fe5f50d43e15 | ≥ 6a4d0774f02d61f8c75ffe2e38a8553410fe52e9, < c8d53b70166d1dc463ef42adb7293e1a770822c7 | ≥ 6a4d0774f02d61f8c75ffe2e38a8553410fe52e9, < 29732b68a6816a815d58e9ab229844c23617e1e0 | ≥ 6a4d0774f02d61f8c75ffe2e38a8553410fe52e9, < 4ee937107d52f9e5c350e4b5e629760e328b3d9f | 6.8
  • linux_kernel≥ 6.8, < 6.18.22 | ≥ 6.19, < 6.19.12 | 7.0:rc1 | 7.0:rc2 | 7.0:rc3 | 7.0:rc4 | 7.0:rc5 | 7.0:rc6
Debian1 product
  • linuxAll versions (No fix recorded) | < 6.19.12-1

4 vendors · 140 products

References

8 links