7.8

CVE-2026-43093: linux Out-of-bounds Write

CVSS: 7.8v3.1HighModified
AliasesUBUNTU-CVE-2026-43093DEBIAN-CVE-2026-43093
Published 06-05-2026Last modified 19-10-2026
Open JSON

Vulnerability summary

CVE-2026-43093 is a high (CVSS 7.8) Out-of-bounds Write vulnerability in linux. EPSS estimates a 0.14% chance of exploitation in the next 30 days, higher than 2.6% of scored vulnerabilities.

Overall risk
31/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.8/10
010
High · v3.1 (CVE.org)
EPSS score
0.14%
0%100%
Low · +0.01 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 40 · Related 39
LSN-0122-1OPENSUSE-SU-2026:21388-1SUSE-SU-2026:22521-1SUSE-SU-2026:22522-1SUSE-SU-2026:22665-1SUSE-SU-2026:22666-1

Timeline

  1. 06-05-2026
    PublishedVulnerability first disclosed.
  2. 19-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: xsk: tighten UMEM headroom validation to account for tailroom and min frame The current headroom validation in xdp_umem_reg() could leave us with insufficient space dedicated to even receive minimum-sized ethernet frame. Furthermore if multi-buffer would come to play then skb_shared_info stored at the end of XSK frame would be corrupted. HW typically works with 128-aligned sizes so let us provide this value as bare minimum. Multi-buffer setting is known later in the configuration process so besides accounting for 128 bytes, let us also take care of tailroom space upfront.

CVSS metrics

5 scores · 4 sources · 2 versions

EPSS trend

Probability

0.14%

Chance of exploitation in the next 30 days

Percentile

3%

Versus all other CVEs

30-day change

+0.01 pp

From 0.13% on 21-09-2026

21-09-202621-10-2026
EPSS score
0.14%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu153 products
  • linuxAll versions (No fix recorded) | < 5.15.0-186.196 | < 6.8.0-136.136
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.15.0-1112.119 | < 6.8.0-1061.64
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ 99e3a236dd43d06c65af0a2ef9cb44306aef6e02, < 5f123bc278bf4e3283d8606321bebbfd299f4384 | ≥ 99e3a236dd43d06c65af0a2ef9cb44306aef6e02, < 1a6051cd7e3e4c54ff3854a43b638b9292af5e67 | ≥ 99e3a236dd43d06c65af0a2ef9cb44306aef6e02, < 8769708add9eadeea8041a9761771bb715a87104 | ≥ 99e3a236dd43d06c65af0a2ef9cb44306aef6e02, < a03975beb9f6af0d8ac051e30b2abeabe618414f | ≥ 99e3a236dd43d06c65af0a2ef9cb44306aef6e02, < 0ec4d3f6e6934deb843b561ae048cd17218e5ad1 | ≥ 99e3a236dd43d06c65af0a2ef9cb44306aef6e02, < 9ea6ba4f3195dcba6e8b3e7b2e748593b7cafb12 | ≥ 99e3a236dd43d06c65af0a2ef9cb44306aef6e02, < 6523bc1b40e69301f24c14338b762af4739d6d39 | ≥ 99e3a236dd43d06c65af0a2ef9cb44306aef6e02, < a315e022a72d95ef5f1d4e58e903cb492b0ad931 | ad8fb61c184fe0f8d1e0b5b954d010fb9f94a6ee | 25c9cdef57488578da21d99eb614b97ffcf6e59f | 98d3c852e63b49129515dd18c875999efaf8530a | ≥ 4.19.118, < 4.20 | ≥ 5.4.35, < 5.5 | ≥ 5.6.7, < 5.7 | 5.7
  • linux_kernel≥ 4.19.118, < 4.20 | ≥ 5.4.35, < 5.5 | ≥ 5.6.7, < 5.7 | ≥ 5.7.1, < 6.6.136 | ≥ 6.7, < 6.12.83 | ≥ 6.13, < 6.18.24 | ≥ 6.19, < 6.19.14 | 5.7 | 5.7:rc2 | 5.7:rc3 | 5.7:rc4 | 5.7:rc5 | 5.7:rc6 | 5.7:rc7 | 7.0:rc1 | 7.0:rc2 | 7.0:rc3 | 7.0:rc4 | 7.0:rc5 | 7.0:rc6 | 7.0:rc7
Debian1 product
  • linux< 6.1.176-1 | < 6.12.85-1 | < 6.19.14-1

3 vendors · 156 products

References

40 links
Show all 40 references